Em resumo
- CVE-2020-15391 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta github.com/loft-sh/devspace, devspace (devspace).
- Chance de exploração nos próximos 30 dias (EPSS): 2.7%, maior que 86.1% das vulnerabilidades.
- Correção: atualize para 4.14.0 ou posterior.
Description
The UI in DevSpace 4.13.0 allows web sites to execute actions on pods (on behalf of a victim) because of a lack of authentication for the WebSocket protocol. This leads to remote code execution.
NVD description
The UI in DevSpace 4.13.0 allows web sites to execute actions on pods (on behalf of a victim) because of a lack of authentication for the WebSocket protocol. This leads to remote code execution.
Mais vulnerabilidades de github.com/loft-sh/devspace
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free