havenweb

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

havenweb records in CISA KEV

No havenweb vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2023-09838 CVE-2023-24060 · GHSA-jmj5-q6wr-x9v2

MEDIUM 56

Haven 5d15944 allows Server-Side Request Forgery (SSRF) via the feed[url]= Feeds functionality.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00487 Published 2023-01-27 No fix listed CWE-918

TI-2024-26800 CVE-2024-39906

MEDIUM 40

A command injection vulnerability was found in the IndieAuth functionality of the Ruby on Rails based Haven blog web application.

CVSS 3.1HIGH 8.4 Network No auth User interaction EPSS 0.01021 Published 2024-07-19 No fix listed CWE-74