CyberSecBulletin

Scidsg vulnerabilities

We track 2 vulnerabilities in Scidsg products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 12, 2024.

2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score

Latest Scidsg vulnerabilities

  • 7.1 High severity

    hushline: Improper Restriction of Rendered UI Layers or Frames

    CVE-2024-55888Scidsg

    Hush Line is an open-source whistleblower management system. Starting in version 0.1.0 and prior to version 0.3.5, the productions server appeared to have been misconfigured and missed providing any content security policy or security headers. This could resul

  • 7.5 High severity

    hushline: Improper Authentication

    CVE-2024-38523Scidsg

    Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. The TOTP authentication flow has multiple issues that weakens its one-time nature. Specifically, the lack of 2FA for changing security settings allows attack