CVE-2025-31132
CVSS 3.1 Score 8.1 of 10 (high)
Details
Published Apr 1, 2025
CWE ID 20
Summary
CVE-2025-31132 is a vulnerability affecting the open-source messaging platform, Raven. The issue granted any logged-in user the ability to execute arbitrary code through an API endpoint. This weakness posed a significant risk as it allowed unauthorized access and potential data manipulation. The vulnerability has been resolved in version 2.1.10.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.