Lucene search
+L

6 matches found

NVD
NVD
added 2024/12/12 8:15 p.m.12 views

CVE-2024-55888

Hush Line is an open-source whistleblower management system. Starting in version 0.1.0 and prior to version 0.3.5, the productions server appeared to have been misconfigured and missed providing any content security policy or security headers. This could result in bypassing of cross-site scriptin...

7.1CVSS0.003EPSS
Exploits0References1
Circl
Circl
added 2024/12/12 7:35 p.m.6 views

CVE-2024-55888

creationtimestamp| type| source ---|---|--- 2024-12-12 19:35:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113641528492308277 2024-12-12 22:12:11+00:00| seen| https://t.me/cvedetector/12809...

7.1CVSS4.8AI score0.003EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/12/12 7:28 p.m.6 views

CVE-2024-55888 Content Security Policy appears to be missing in software and production setup

Hush Line is an open-source whistleblower management system. Starting in version 0.1.0 and prior to version 0.3.5, the productions server appeared to have been misconfigured and missed providing any content security policy or security headers. This could result in bypassing of cross-site scriptin...

7.1CVSS6.5AI score0.003EPSS
Exploits0References1
CVE
CVE
added 2024/12/12 7:28 p.m.55 views

CVE-2024-55888

CVE-2024-55888 affects Hush Line, an open-source whistleblower management system. A production-server misconfiguration in versions 0.1.0 through 0.3.4 left out a Content Security Policy and security headers, potentially bypassing XSS filters. The issue was fixed in version 0.3.5. Affected: Hush L...

7.1CVSS6.9AI score0.003EPSS
Exploits0References1
OSV
OSV
added 2024/12/12 7:28 p.m.4 views

CVE-2024-55888 Content Security Policy appears to be missing in software and production setup

Hush Line is an open-source whistleblower management system. Starting in version 0.1.0 and prior to version 0.3.5, the productions server appeared to have been misconfigured and missed providing any content security policy or security headers. This could result in bypassing of cross-site scriptin...

7.1CVSS6.3AI score0.003EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/12/12 7:28 p.m.20 views

CVE-2024-55888 Content Security Policy appears to be missing in software and production setup

Hush Line is an open-source whistleblower management system. Starting in version 0.1.0 and prior to version 0.3.5, the productions server appeared to have been misconfigured and missed providing any content security policy or security headers. This could result in bypassing of cross-site scriptin...

7.1CVSS0.003EPSS
Exploits0References1
Rows per page
Query Builder