Описание
Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. The CSP policy applied on the tips.hushline.app website and bundled by default in this repository is trivial to bypass. This vulnerability has been patched in version 0.1.0.
Ссылки
- Patch
- ExploitThird Party Advisory
- Patch
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.1.0 (исключая)
cpe:2.3:a:hushline:hush_line:*:*:*:*:*:*:*:*
EPSS
Процентиль: 23%
0.00078
Низкий
6.3 Medium
CVSS3
Дефекты
CWE-183
CWE-697
EPSS
Процентиль: 23%
0.00078
Низкий
6.3 Medium
CVSS3
Дефекты
CWE-183
CWE-697