CVE-2025-31132

Raven allows Remote Code Execution due to improper validation PUBLISHED

Description (CNA)

Raven is an open-source messaging platform. A vulnerability allowed any logged in user to execute code via an API endpoint. This vulnerability is fixed in 2.1.10.

Affected (CNA)

Vendor / product	Versions
The-Commit-Company / raven	affected < 2.1.10

CWE

CWE-20

References

https://github.com/The-Commit-Company/raven/security/advisories/GHSA-wmrr-3mrv-2p57

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.