CVE-2023-49079

Published November 29th, 2023

View on NVD ↗

CVSS v3

9.3

CRITICAL

CVSS v2

N/A

Affected

PROJECT

Description

Misskey is an open source, decentralized social media platform. Misskey's missing signature validation allows arbitrary users to impersonate any remote user. This issue has been patched in version 2023.11.1-beta.1.

misskey-dev/misskey

🌎 A completely free and open interplanetary-microblogging platform 🚀

GitHub

11.2K