9 matches found
CVE-2026-108731
Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability that allows authenticated users to join invite-only Public workspaces by ignoring the canonlyjoinviainvite setting. Attackers with the Raven User role can call the joinworkspace method to become persistent members, reading a...
CVE-2026-108731 Raven 2.0.0 through 3.0.0 Missing Authorization via join_workspace Invite-Only Bypass
Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability that allows authenticated users to join invite-only Public workspaces by ignoring the canonlyjoinviainvite setting. Attackers with the Raven User role can call the joinworkspace method to become persistent members, reading a...
CVE-2026-108731
The software Raven versions 2.0.0 through 3.0.0 is affected by a missing authorization vulnerability (CWE-862). This flaw allows authenticated users with the Raven User role to join invite-only Public workspaces by bypassing the can_only_join_via_invite setting via the join_workspace method. Succ...
EUVD-2026-96897
Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability that allows authenticated users to join invite-only Public workspaces by ignoring the canonlyjoinviainvite setting. Attackers with the Raven User role can call the joinworkspace method to become persistent members, reading a...
CVE-2026-108731
Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability that allows authenticated users to join invite-only Public workspaces by ignoring the canonlyjoinviainvite setting. Attackers with the Raven User role can call the joinworkspace method to become persistent members, reading a...
CVE-2026-108731 Raven 2.0.0 through 3.0.0 Missing Authorization via join_workspace Invite-Only Bypass
Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability that allows authenticated users to join invite-only Public workspaces by ignoring the canonlyjoinviainvite setting. Attackers with the Raven User role can call the joinworkspace method to become persistent members, reading a...
CVE-2026-108731 Raven 2.0.0 through 3.0.0 Missing Authorization via join_workspace Invite-Only Bypass
Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability that allows authenticated users to join invite-only Public workspaces by ignoring the canonlyjoinviainvite setting. Attackers with the Raven User role can call the joinworkspace method to become persistent members, reading a...
CVE-2026-108731: Missing Authorization
Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability that allows authenticated users to join invite-only Public workspaces by ignoring the canonlyjoinviainvite setting. Attackers with the Raven User role can call the joinworkspace method to become persistent members, reading a...
The Commit Company Raven authorization issue vulnerability
The Commit Company Raven 2.0.0 to 3.0.0 versions have an authorization issue vulnerability. This vulnerability stems from a lack of authorization verification, allowing authenticated users to ignore the “canonlyjoinviainvite” setting and join only invitation-only Public workspaces. Attackers with...