Vulnerabilities in LitmusChaos
8 resultsCVE-2025-8792MEDIUMLitmusChaos Litmus client-side enforcement of server-side securityEPSS 0.9%CVE-2025-8797MEDIUMLitmusChaos Litmus LocalStorage permissionEPSS 0.5%CVE-2025-8795MEDIUMLitmusChaos Litmus login access controlEPSS 0.4%CVE-2025-8793MEDIUMLitmusChaos Litmus resource injectionEPSS 0.4%CVE-2025-8796MEDIUMLitmusChaos Litmus Delete Request delete_project authorizationEPSS 0.3%CVE-2025-8791MEDIUMLitmusChaos Litmus list_projects improper authorizationEPSS 0.3%CVE-2025-14261HIGHLack of entropy allows registered low-privileged users of Litmus to crack valid JWT tokens and gain admin privilegesEPSS 0.3%CVE-2025-8794MEDIUMLitmusChaos Litmus LocalStorage authorizationEPSS 0.2%