Scidsg

4 CVEs in 1 Scidsg product, including Hushline. Newest: CVE-2024-55888 (2024-12-12). Severity, EPSS and public exploits for each.

Scidsg products with known CVEs

ProductCVEs
Hushline4
Scidsg CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-55888High7.12024-12-12Hush Line is an open-source whistleblower management system. Starting in version 0.1.0 and prior to version 0.3.5, the productions server appeared to have been…
CVE-2024-38522Medium6.32024-06-28Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. The CSP policy applied on the `tips.hushline.app` websit…
CVE-2024-38521High8.82024-06-28Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. There is a stored XSS in the Inbox. The input is display…
CVE-2024-38523High7.52024-06-27Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. The TOTP authentication flow has multiple issues that we…