CVE-2024-27092
Medium
Description
Hoppscotch is an API development ecosystem. Due to lack of validation for fields like Label (Edit Team) - TeamName, bad actors can send emails with Spoofed Content as Hoppscotch. Part of payload (external link) is presented in clickable form - easier to achieve own goals by malicious actors. This issue is fixed in 2023.12.6.
SeverityMedium
CVSS5.4
Exploit probability49. percentile0.6%
ProductHoppscotch
PublishedFeb 29, 2024
First seenFeb 29, 2024
How to fix
Update
- hoppscotch hoppscotch2023.12.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hoppscotch hoppscotch | v < 2023.12.6 | 2023.12.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.