Havenweb vulnerabilities
We track 1 vulnerability in Havenweb products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 19, 2024.
1vulnerabilities
0critical
1high
0exploited
8.3average CVSS score
Latest Havenweb vulnerabilities
- 8.3 High severity
haven: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A command injection vulnerability was found in the IndieAuth functionality of the Ruby on Rails based Haven blog web application. The affected functionality requires authentication, but an attacker can craft a link that they can pass to a logged in administrat