Skip to content
OpenAdvisories

Product · havenweb

haven

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.4
    CVE-2024-39906

    Remote code execution in Haven IndieAuthClient (GHSL-2024-093)

    A command injection vulnerability was found in the IndieAuth functionality of the Ruby on Rails based Haven blog web application. The affected functionality requires authentication, but an attacker can craft a link that they can pass to a logged in administra…

    havenweb haven