CVE-2025-31132 HIGH

CVE-2025-31132: Raven allows Remote Code Execution due to improper validation

Vendor The-Commit-Company
Product raven
Weakness CWE-20 · Input validation
Published April 1, 2025
Last update April 1, 2025
View on NVD All CVEs

CVSS base score

8.1/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

What the vulnerability does

01Description

Raven is an open-source messaging platform. A vulnerability allowed any logged in user to execute code via an API endpoint. This vulnerability is fixed in 2.1.10.

Key dates

02Disclosure timeline

April 1, 2025 CVE published
April 1, 2025 Record updated