Lucene search

PRIOn knowledge basePRION:CVE-2023-49079

HistoryNov 29, 2023 - 7:15 p.m.

Design/Logic Flaw

2023-11-2919:15:00

PRIOn knowledge base

www.prio-n.com

misskey

design flaw

user impersonation

signature validation

decentralized

social media

platform

open source

patched

nvd

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.1%

JSON

Misskey is an open source, decentralized social media platform. Misskey’s missing signature validation allows arbitrary users to impersonate any remote user. This issue has been patched in version 2023.11.1-beta.1.

CPENameOperatorVersion
misskeylt2023.11.1

CPE	Name	Operator	Version
	misskey	lt	2023.11.1

References

github.com/misskey-dev/misskey/security/advisories/GHSA-3f39-6537-3cgc