GCVE - cpe:2.3:a:litmuschaos:litmus:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:litmuschaos:litmus:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Litmuschaos (`a3b4fd7d-fe22-5098-aaed-b265d2b53fe7`)
Product	Litmus (`71b825f1-95e0-5624-ab45-d8ea65e63842`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/litmuschaos/litmus`	purl2cpe	2026-06-01 10:16:11.773640
`pkg:golang/github.com/litmuschaos/litmus`	purl2cpe	2026-06-01 10:16:11.773642

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-8797`	vulnerable	2026-06-08 07:45:21.153140	LitmusChaos Litmus LocalStorage permission MEDIUM (6.3) A vulnerability was found in LitmusChaos Litmus up to 3.19.0 and classified as critical. This issue affects some unknown processing of the component LocalStorage Handler. The manipulation leads to permission issues. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-08-10T06:32:06.582Z Updated: 2025-08-13T14:37:02.141Z Open on db.gcve.eu Reference links https://vuldb.com/?id.319325 https://vuldb.com/?ctiid.319325 https://vuldb.com/?submit.625991 https://github.com/MaiqueSilva/VulnDB/blob/main/readme07.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-8796`	vulnerable	2026-06-08 07:45:21.152763	LitmusChaos Litmus Delete Request delete_project authorization MEDIUM (5.4) A vulnerability has been found in LitmusChaos Litmus up to 3.19.0 and classified as problematic. This vulnerability affects unknown code of the file /auth/delete_project/ of the component Delete Request Handler. The manipulation of the argument projectID leads to missing authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-08-10T06:02:06.440Z Updated: 2025-08-13T14:38:03.654Z Open on db.gcve.eu Reference links https://vuldb.com/?id.319324 https://vuldb.com/?ctiid.319324 https://vuldb.com/?submit.625989 https://github.com/MaiqueSilva/VulnDB/blob/main/readme06.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-8795`	vulnerable	2026-06-08 07:45:21.152378	LitmusChaos Litmus login access control MEDIUM (6.3) A vulnerability, which was classified as critical, was found in LitmusChaos Litmus up to 3.19.0. This affects an unknown part of the file /auth/login. The manipulation of the argument projectID leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-08-10T05:32:06.512Z Updated: 2025-08-13T20:11:50.769Z Open on db.gcve.eu Reference links https://vuldb.com/?id.319323 https://vuldb.com/?ctiid.319323 https://vuldb.com/?submit.625984 https://github.com/MaiqueSilva/VulnDB/blob/main/readme05.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-8794`	vulnerable	2026-06-08 07:45:21.151987	LitmusChaos Litmus LocalStorage authorization MEDIUM (5.3) A vulnerability, which was classified as problematic, has been found in LitmusChaos Litmus up to 3.19.0. Affected by this issue is some unknown functionality of the component LocalStorage Handler. The manipulation of the argument projectID leads to authorization bypass. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-08-10T04:32:06.433Z Updated: 2025-08-13T19:49:12.667Z Open on db.gcve.eu Reference links https://vuldb.com/?id.319322 https://vuldb.com/?ctiid.319322 https://vuldb.com/?submit.625982 https://github.com/MaiqueSilva/VulnDB/blob/main/readme04.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-8793`	vulnerable	2026-06-08 07:45:21.151494	LitmusChaos Litmus resource injection MEDIUM (4.3) A vulnerability classified as problematic was found in LitmusChaos Litmus up to 3.19.0. Affected by this vulnerability is an unknown functionality. The manipulation of the argument projectID leads to improper control of resource identifiers. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-08-10T04:02:06.295Z Updated: 2025-08-13T15:07:23.503Z Open on db.gcve.eu Reference links https://vuldb.com/?id.319321 https://vuldb.com/?ctiid.319321 https://vuldb.com/?submit.625956 https://github.com/MaiqueSilva/VulnDB/blob/main/readme03.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-8792`	vulnerable	2026-06-08 07:45:21.150923	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-8791`	vulnerable	2026-06-08 07:45:21.150461	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-14261`	vulnerable	2026-06-08 07:06:34.163997	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Litmus

Notes

PURL mappings

Vulnerability references

Contribute