Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2024-38522

CSP bypass in Hush Line

Description

Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. The CSP policy applied on the `tips.hushline.app` website and bundled by default in this repository is trivial to bypass. This vulnerability has been patched in version 0.1.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

scidsg hushline

  • < 0.1.0affected

References