Package · Maven

org.apache.rave:rave-web

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium —

CVE-2013-1814 Public exploit EPSS 74%

Apache Rave information disclosure vulnerability

The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information about all user accounts via the offset parameter, as demonstrated by discovering password hashes in the password field…

org.apache.rave:rave-web org.apache.rave:rave-core org.apache.rave:rave-portal-resources Maven

Mar 14, 2013