CVE-2024-55888

Hush Line is an open-source whistleblower management system. Starting in version 0.1.0 and prior to version 0.3.5, the productions server appeared to have been misconfigured and missed providing any content security policy or security headers. This could result in bypassing of cross-site scripting filters. Version 0.3.5 fixed the issue.

• CWE-1021

• https://github.com/scidsg/hushline/security/advisories/GHSA-m592-g8qv-hrqx

Published

Dec 12, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-5588A vulnerability was found in itsourcecode Learning Managemen…8.8
• CVE-2024-55881In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-55884In the Mullvad VPN client 2024.6 (Desktop), 2024.8 (iOS), an…9
• CVE-2024-55885beego is an open-source web framework for the Go programming…7.5
• CVE-2024-55886OpenSearch Data Prepper is a component of the OpenSearch pro…6.9
• CVE-2024-55887Ucum-java is a FHIR Java library providing UCUM Services. In…8.6
• CVE-2024-55889phpMyFAQ is an open source FAQ web application. Prior to ver…7.2
• CVE-2024-5589A vulnerability was found in Netentsec NS-ASG Application Se…9.8
• CVE-2024-55890D-Tale is a visualizer for pandas data structures. Prior to …6.9
• CVE-2024-55891TYPO3 is a free and open source Content Management Framework…5.3
• CVE-2024-55892TYPO3 is a free and open source Content Management Framework…6.1
• CVE-2024-55893TYPO3 is a free and open source Content Management Framework…4.3