CVE-2024-52593

Misskey is an open source, federated social media platform.In affected versions missing validation in "NoteCreateService.insertNote", "ApPersonService.createPerson", and "ApPersonService.updatePerson" allows an attacker to control the target of any "origin" links such as the "view on remote...