CVE-2020-15391
⛔ criticalSummary
The UI in DevSpace 4.13.0 allows web sites to execute actions on pods (on behalf of a victim) because of a lack of authentication for the WebSocket protocol. This leads to remote code execution.
CVSS Score
9.8
Critical
EPSS Score
2.4
Exploit Probability
Published Date
2020-07-23
First Seen: 2026-01-05
📊 Relative Risk Intelligence
This CVE is Very High Risk - more severe than 90.5% of all 338,292 vulnerabilities in our database.
#31,990
Top 10% most severe
Severity Percentile
Last Modified
2024-11-21
Source
NVD 🔗
CVSS Vector 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE IDs (Weakness Types)