Skip to content

Vendor

org.apache.rave vulnerabilities

1 published CVE affecting org.apache.rave, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of org.apache.rave alerts

Products

Latest org.apache.rave CVEs

Newest publication first

  1. CVE-2013-1814 Apache Rave information disclosure vulnerability

    Published
    MediumCVSS 4.0 EPSS 73.6% Framework module Public exploit

    The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information about all user accounts via the offset parameter, as demonstrated by discovering password hashes in the password field of a response.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.