Raven Remote Code Execution Vulnerability for Logged-In Users
Vulnerability
A remote code execution vulnerability has been identified in Raven, an open-source messaging platform, in versions prior to 2.1.10. This issue allows any logged-in user to execute code through an API endpoint.
Impact
Exploitation of this vulnerability allows for remote code execution on the server where Raven is hosted.
Remediation
Users are advised to upgrade to version 2.1.10 or later. No other workarounds are available.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
5.2remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.