CVE-2024-55888

Summary

CVE-2024-55888 is a vulnerability affecting the open-source Hush Line whistleblower management system. Prior to version 0.3.5, the production server was found to be misconfigured and lacked Content Security Policy (CSP) or security headers. This oversight could enable attackers to bypass cross-site scripting filters, posing a security risk. The issue has since been addressed in version 0.3.5.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.