Advisories · Technology
litmus.
Every CVE that names litmus among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Lack of entropy allows registered low-privileged users of Litmus to crack valid JWT tokens and gain admin privileges
- litmus
- CWE-331
- CVSS 5.3 Medium
LitmusChaos Litmus LocalStorage permission
- Litmus
- Privilege escalation
- CWE-275
- CVSS 5.3 Medium
LitmusChaos Litmus Delete Request delete_project authorization
- Litmus
- Broken access control
- CVSS 5.3 Medium
LitmusChaos Litmus login access control
- Litmus
- Privilege escalation
- Broken access control
- CVSS 4.8 Medium
LitmusChaos Litmus LocalStorage authorization
- Litmus
- Broken access control
- CVSS 5.3 Medium
LitmusChaos Litmus resource injection
- Litmus
- CWE-99
- CVSS 5.3 Medium
LitmusChaos Litmus client-side enforcement of server-side security
- Litmus
- CWE-602
- CVSS 5.3 Medium
LitmusChaos Litmus list_projects improper authorization
- Litmus
- Privilege escalation
- Broken access control