Haven vulnerabilities
1 known vulnerability in Haven from Havenweb. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.3average CVSS score
Latest first
- 8.3 High severity
haven: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A command injection vulnerability was found in the IndieAuth functionality of the Ruby on Rails based Haven blog web application. The affected functionality requires authentication, but an attacker can craft a link that they can pass to a logged in administrat