Skip to content

Product

apache rave vulnerabilities

1 published CVE affecting apache rave, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest apache rave CVEs

Newest publication first

  1. CVE-2013-1814 Apache Rave information disclosure vulnerability

    Published
    MediumCVSS 4.0 EPSS 73.6% Framework module Public exploit

    The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information about all user accounts via the offset parameter, as demonstrated by discovering password hashes in the password field of a response.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.