CVE-2023-49095

Published November 30th, 2023

View on NVD ↗

CVSS v3

8.6

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

nexkey is a microblogging platform. Insufficient validation of ActivityPub requests received in inbox could allow any user to impersonate another user in certain circumstances. This issue has been patched in version 12.122.2.

nexryai/concorde

（旧称: nexkey） nexryaiによるMisskey v12ハードフォーク

GitHub