CVE-2025-8792 — Client-Side Enforcement of Server-Side Security in Litmus

CWE-602 — Client-Side Enforcement of Server-Side Security2 documents2 sources
Severity
5.3MEDIUMNVD
EPSS
0.0%
top 85.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Litmuschaos Litmus
Timeline
PublishedAug 10

Description

A vulnerability classified as problematic has been found in LitmusChaos Litmus up to 3.19.0. Affected is an unknown function. The manipulation leads to client-side enforcement of server-side security. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

▶NVDlitmuschaos/litmus3.19.0
▶CVEListV5litmuschaos/litmus20 versions+19

🔴Vulnerability Details

1
GHSA
GHSA-fxg2-xhj7-rmc7: A vulnerability classified as problematic has been found in LitmusChaos Litmus up to 3↗2025-08-10
▶