Security Advisory
CVE-2020-15391
9.8
CRITICAL
Vulnerability Description
The UI in DevSpace 4.13.0 allows web sites to execute actions on pods (on behalf of a victim) because of a lack of authentication for the WebSocket protocol. This leads to remote code execution.
Published Date
July 23, 2020
Official Source
NIST NVD Advisory