hushline vulnerabilities

2 known vulnerabilities in hushline from Scidsg. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  hushline: Improper Restriction of Rendered UI Layers or Frames

  CVE-2024-55888Dec 12, 2024Scidsg

  Hush Line is an open-source whistleblower management system. Starting in version 0.1.0 and prior to version 0.3.5, the productions server appeared to have been misconfigured and missed providing any content security policy or security headers. This could resul

• 7.5 High severity

  hushline: Improper Authentication

  CVE-2024-38523Jun 27, 2024Scidsg

  Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. The TOTP authentication flow has multiple issues that weakens its one-time nature. Specifically, the lack of 2FA for changing security settings allows attack