Vendors / LitmusChaos Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now LitmusChaos records in CISA KEV No LitmusChaos vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 57
A vulnerability was found in LitmusChaos Litmus up to 3.19.0 and classified as critical.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00587 · Published 2025-08-10 · No fix listed CWE-266
Priority MEDIUM 57
A vulnerability has been found in LitmusChaos Litmus up to 3.19.0 and classified as problematic.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00433 · Published 2025-08-10 · No fix listed CWE-862
Priority MEDIUM 57
A vulnerability, which was classified as critical, was found in LitmusChaos Litmus up to 3.19.0.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00478 · Published 2025-08-10 · No fix listed CWE-266
Priority MEDIUM 57
A vulnerability classified as problematic was found in LitmusChaos Litmus up to 3.19.0.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00484 · Published 2025-08-10 · No fix listed CWE-99
Priority MEDIUM 57
A vulnerability classified as problematic has been found in LitmusChaos Litmus up to 3.19.0.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.01143 · Published 2025-08-10 · No fix listed CWE-602
Priority MEDIUM 57
A vulnerability was found in LitmusChaos Litmus up to 3.19.0.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00385 · Published 2025-08-10 · No fix listed CWE-266
Priority MEDIUM 55
A vulnerability, which was classified as problematic, has been found in LitmusChaos Litmus up to 3.19.0.
CVSS 4.0 MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00273 · Published 2025-08-10 · No fix listed CWE-285
Priority LOW 31
The Litmus platform uses JWT for authentication and authorization, but the secret being used for signing the JWT is only 6 bytes long at its core, which makes it extremely easy to crack.
CVSS 3.1 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00302 · Published 2025-12-08 · Fixed in 3.23.0 CWE-331
Open these records in search → All records by CVSS severity
Critical0 High1 Medium7 Low0 No CVSS0