CVE-2024-56083: High severity cognition devin vulnerability
Cognition Devin before 2024-12-12 provides write access to code by an attacker who discovers the https://vscode-randomlygeneratedstring.devinapps.com URL (aka the VSCode live share URL) for a specific "Use Devin's Machine" session. For example, this URL may be discovered if a customer posts a screenshot of a Devin session to social media, or publicly streams their Devin session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56083?
CVE-2024-56083 is classified as a critical severity vulnerability due to its potential for allowing unauthorized access to code.
How do I fix CVE-2024-56083?
To mitigate CVE-2024-56083, update Cognition Devin to a version released after December 12, 2024.
What type of vulnerability is CVE-2024-56083?
CVE-2024-56083 is a security vulnerability that provides write access to attackers via a discovered VSCode live share URL.
Who is affected by CVE-2024-56083?
Users of Cognition Devin before the version released on December 12, 2024, are affected by CVE-2024-56083.
What can attackers do with CVE-2024-56083?
Exploiting CVE-2024-56083 allows attackers to gain unauthorized write access to code during a 'Use Devin's Machine' session.