Medium severity6.3NVD Advisory· Published Jun 28, 2024· Updated Jun 17, 2026
CVE-2024-38522
CVE-2024-38522
Description
Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. The CSP policy applied on the tips.hushline.app website and bundled by default in this repository is trivial to bypass. This vulnerability has been patched in version 0.1.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
2- github.com/scidsg/hushline/commit/2bbeae78a24ca2cd893f32a1812f5f6634cb21b6nvdPatch
- github.com/scidsg/hushline/security/advisories/GHSA-r85c-95x7-4h7qnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.