Skip to content
OpenAdvisories

Vendor

havenweb

1 known vulnerabilities.

Products

haven 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.4
    CVE-2024-39906

    Remote code execution in Haven IndieAuthClient (GHSL-2024-093)

    A command injection vulnerability was found in the IndieAuth functionality of the Ruby on Rails based Haven blog web application. The affected functionality requires authentication, but an attacker can craft a link that they can pass to a logged in administra…

    havenweb haven