Havenweb Haven
2 CVEs affecting Havenweb Haven. Latest disclosed: 2024-07-19. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-39906 | High | 8.3 | 2024-07-19 | A command injection vulnerability was found in the IndieAuth functionality of the Ruby on Rails based Haven blog web application. The affected functionality re… |
CVE-2023-24060 | Medium | 5.0 | 2023-01-27 | Haven 5d15944 allows Server-Side Request Forgery (SSRF) via the feed[url]= Feeds functionality. Authenticated users with the ability to create new RSS Feeds or… |