CVE-2024-38522

Published June 28th, 2024

View on NVD ↗

CVSS v3

6.3

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. The CSP policy applied on the `tips.hushline.app` website and bundled by default in this repository is trivial to bypass. This vulnerability has been patched in version 0.1.0.

scidsg/hushline

Anonymous, end-to-end encrypted tip lines for organizations and individuals.

GitHub

128