CVE-2024-55888

CVSS V2 None CVSS V3 None

Description

Hush Line is an open-source whistleblower management system. Starting in version 0.1.0 and prior to version 0.3.5, the productions server appeared to have been misconfigured and missed providing any content security policy or security headers. This could result in bypassing of cross-site scripting filters. Version 0.3.5 fixed the issue.

Overview

CVE ID
CVE-2024-55888

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-12-12T19:28:15.795Z

Last Modified Date
2024-12-12T19:28:15.795Z

Weakness Enumerations

CWE	URL
CWE-1021	http://cwe.mitre.org/data/definitions/1021.html

References

Reference URL	Reference Tags
https://github.com/scidsg/hushline/security/advisories/GHSA-m592-g8qv-hrqx	x_refsource_CONFIRM

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-55888
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-55888

History

Created	Old Value	New Value	Data Type	Notes
2024-12-13 13:20:38				Added to TrackCVE