CVE-2024-52593

Misskey is an open source, federated social media platform.In affected versions missing validation in "NoteCreateService.insertNote", "ApPersonService.createPerson", and "ApPersonService.updatePerson" allows an attacker to control the target of any "origin" links such as the "view on remote...

PT-2024-35390

Name of the Vulnerable Software and Affected Versions Misskey versions prior to 2024.11.0-alpha.3 Description Misskey is an open source, federated social media platform. In affected versions, missing validation in NoteCreateService.insertNote, ApPersonService.createPerson, and...