CVE-2025-31132

Summary

Raven is an open-source messaging platform. A vulnerability allowed any logged in user to execute code via an API endpoint. This vulnerability is fixed in 2.1.10.

Affected Software

Weaknesses

• CWE-20: CWE-20: Improper Input Validation

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://github.com/The-Commit-Company/raven/security/advisories/GHSA-wmrr-3mrv-2p57

• ←Previous
• Next→