CVE-2024-26362

HTML injection vulnerability in Enpass Password Manager Desktop Client 6.9.2 for Windows and Linux allows attackers to run arbitrary HTML code via creation of crafted note.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:enpass:password_manager:6.9.2:*:*:*:desktop:*:*:*
OR cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

17 Jun 2025, 20:56

Type Values Removed Values Added
First Time Enpass password Manager
Enpass
Linux
Microsoft windows
Microsoft
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:enpass:password_manager:6.9.2:*:*:*:desktop:*:*:*
References () https://packetstormsecurity.com/files/177075/Enpass-Desktop-Application-6.9.2-HTML-Injection.html - () https://packetstormsecurity.com/files/177075/Enpass-Desktop-Application-6.9.2-HTML-Injection.html - Broken Link

10 Apr 2024, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-10 21:15

Updated : 2025-06-17 20:56


NVD link : CVE-2024-26362

Mitre link : CVE-2024-26362


JSON object : View

Products Affected

linux

  • linux_kernel

microsoft

  • windows

enpass

  • password_manager
CWE

No CWE.