CVE-2023-25154

🗓️ 22 Feb 2023 19:11:15Reported by [email protected]Type

Misskey platform allows remote attackers to execute arbitrary JavaScript prior to version 13.5.

Reporter	Title	Published	Views	Family All 5
Prion	Design/Logic Flaw	22 Feb 202319:15	–	prion
Vulnrichment	CVE-2023-25154 Cross site scripting (XSS) of ActivityPub URI in misskey	22 Feb 202319:00	–	vulnrichment
OSV	CVE-2023-25154	22 Feb 202319:15	–	osv
CVE	CVE-2023-25154	22 Feb 202319:15	–	cve
Cvelist	CVE-2023-25154 Cross site scripting (XSS) of ActivityPub URI in misskey	22 Feb 202319:00	–	cvelist

Nvd

Node

misskey misskeyRange<13.5.0

Source	Link
github	www.github.com/misskey-dev/misskey/security/advisories/GHSA-pfp5-r48x-fg25

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Feb 2023 19:15Current

7High risk

Vulners AI Score7

CVSS36.1

EPSS0.00072

CWE-79