Litmuschaos

Litmus

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.1

CVE-2025-14261

  • EPSS 0.07%
  • Veröffentlicht 08.12.2025 18:12:46
  • Zuletzt bearbeitet 09.12.2025 18:37:33

The Litmus platform uses JWT for authentication and authorization, but the secret being used for signing the JWT is only 6 bytes long at its core, which makes it extremely easy to crack.

8.8

CVE-2025-8797

Exploit
  • EPSS 0.05%
  • Veröffentlicht 10.08.2025 06:32:06
  • Zuletzt bearbeitet 02.09.2025 18:42:44

A vulnerability was found in LitmusChaos Litmus up to 3.19.0 and classified as critical. This issue affects some unknown processing of the component LocalStorage Handler. The manipulation leads to permission issues. The attack may be initiated remote...

5.5

CVE-2025-8796

Exploit
  • EPSS 0.06%
  • Veröffentlicht 10.08.2025 06:15:26
  • Zuletzt bearbeitet 02.09.2025 18:43:29

A vulnerability has been found in LitmusChaos Litmus up to 3.19.0 and classified as problematic. This vulnerability affects unknown code of the file /auth/delete_project/ of the component Delete Request Handler. The manipulation of the argument proje...

9.9

CVE-2025-8795

Exploit
  • EPSS 0.05%
  • Veröffentlicht 10.08.2025 05:32:06
  • Zuletzt bearbeitet 02.09.2025 18:46:04

A vulnerability, which was classified as critical, was found in LitmusChaos Litmus up to 3.19.0. This affects an unknown part of the file /auth/login. The manipulation of the argument projectID leads to improper access controls. It is possible to ini...

7.8

CVE-2025-8794

Exploit
  • EPSS 0.02%
  • Veröffentlicht 10.08.2025 04:32:06
  • Zuletzt bearbeitet 02.09.2025 18:47:07

A vulnerability, which was classified as problematic, has been found in LitmusChaos Litmus up to 3.19.0. Affected by this issue is some unknown functionality of the component LocalStorage Handler. The manipulation of the argument projectID leads to a...

5.3

CVE-2025-8793

Exploit
  • EPSS 0.04%
  • Veröffentlicht 10.08.2025 04:15:43
  • Zuletzt bearbeitet 02.09.2025 18:48:34

A vulnerability classified as problematic was found in LitmusChaos Litmus up to 3.19.0. Affected by this vulnerability is an unknown functionality. The manipulation of the argument projectID leads to improper control of resource identifiers. The atta...

5.3

CVE-2025-8792

Exploit
  • EPSS 0.05%
  • Veröffentlicht 10.08.2025 03:32:06
  • Zuletzt bearbeitet 02.09.2025 18:49:36

A vulnerability classified as problematic has been found in LitmusChaos Litmus up to 3.19.0. Affected is an unknown function. The manipulation leads to client-side enforcement of server-side security. It is possible to launch the attack remotely. The...

6.5

CVE-2025-8791

Exploit
  • EPSS 0.05%
  • Veröffentlicht 10.08.2025 03:02:06
  • Zuletzt bearbeitet 02.09.2025 19:19:54

A vulnerability was found in LitmusChaos Litmus up to 3.19.0. It has been rated as critical. This issue affects some unknown processing of the file /auth/list_projects. The manipulation of the argument role leads to improper authorization. The attack...