CVE-2020-15391

The UI in DevSpace 4.13.0 allows web sites to execute actions on pods on behalf of a victim because of a lack of authentication for the WebSocket protocol. This leads to remote code execution...

CVE-2020-15391

DevSpace 4.13.0 contains a vulnerability where the UI allows actions on pods via WebSocket without authentication, enabling remote code execution. The issue is tied to lack of authentication for WebSocket communications, leading to possible control of victim-side pods over the network. Acknowledg...