CVE-2024-38522

MEDIUM Year: 2024
CVSS v3 Score
6.3
Medium
Weakness Type
CWE-183
View all →

Vulnerability Description

Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. The CSP policy applied on the `tips.hushline.app` website and bundled by default in this repository is trivial to bypass. This vulnerability has been patched in version 0.1.0.

Related Vulnerabilities

CVE-2024-12391

MEDIUM
CVSS:6.5(Medium)

A vulnerability in binary-husky/gpt_academic, as of commit 310122f, allows for a Regular Expression Denial of Service (ReDoS) attack. The function '解析项目源码（手动指定和筛选源码文件类型）' permits the execution of user...

CWE-1832024

CVE-2022-34450

MEDIUM
CVSS:6.7(Medium)

PowerPath Management Appliance with version 3.3 contains Privilege Escalation vulnerability. An authenticated admin user could potentially exploit this issue and gain unrestricted control/code executi...

CWE-1832022

CVE-2025-24349

HIGH
CVSS:7.1(High)

A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to delete the configuration of physical network inte...

CWE-1832025

CVE-2023-4399

HIGH
CVSS:7.2(High)

Grafana is an open-source platform for monitoring and observability. In Grafana Enterprise, Request security is a deny list that allows admins to configure Grafana in a way so that the instance doesn’...

CWE-1832023

CVE-2024-1654

HIGH
CVSS:7.2(High)

This vulnerability potentially allows unauthorized write operations which may lead to remote code execution. An attacker must already have authenticated admin access and knowledge of both an internal ...

CWE-1832024

CVE-2021-34787

MEDIUM
CVSS:5.3(Medium)

A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unaut...

CWE-1832021