Filtered by vendor Devspace Subscriptions
Filtered by product Devspace Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-15391 1 Devspace 1 Devspace 2024-08-04 9.8 Critical
The UI in DevSpace 4.13.0 allows web sites to execute actions on pods (on behalf of a victim) because of a lack of authentication for the WebSocket protocol. This leads to remote code execution.