Skip to content
OpenAdvisories

Product · Mirantis

Lens

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.3

    Lack of websocket authentication in Lens causes remote code execution when visiting a malicious website

    Linux users running Lens 5.2.6 and earlier could be compromised by visiting a malicious website. The malicious website could make websocket connections from the victim's browser to Lens and so operate the local terminal feature. This would allow the attacker …