← Back to CVE List

CVE-2020-15391

Published: 2020-07-23T20:15Z
Last Modified: 2024-11-21T05:05Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The UI in DevSpace 4.13.0 allows web sites to execute actions on pods (on behalf of a victim) because of a lack of authentication for the WebSocket protocol. This leads to remote code execution. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt