cbcvebase.

Apache Rave vulnerabilities

1 known vulnerability affecting apache/rave.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2013-1814P3MEDIUMCVSS 4.0PoCv0.11v0.12+8 more2013-03-14
CVE-2013-1814 [MEDIUM] CWE-200 CVE-2013-1814: The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticat The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information about all user accounts via the offset parameter, as demonstrated by discovering password hashes in the password field of a response.
nvd
Apache Rave vulnerabilities | cvebase