💣Exploit CVE-2024-56083 - Devin VSCode Code Write Privilege Escape

[Maksim]

CVE ID : CVE-2024-56083
Published : Dec. 16, 2024, 3:15 a.m. | 47 minutes ago
Description : Cognition Devin before 2024-12-12 provides write access to code by an attacker who discovers the https://vscode-randomly_generated_string.devinapps.com URL (aka the VSCode live share URL) for a specific "Use Devin's Machine" session. For example, this URL may be discovered if a customer posts a screenshot of a Devin session to social media, or publicly streams their Devin session.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.