Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:1 a.m.4 views

CVE-2023-43793

Misskey is an open source, decentralized social media platform. Prior to version 2023.9.0, by editing the URL, a user can bypass the authentication of the Bull dashboard, which is the job queue management UI, and access it. Version 2023.9.0 contains a fix. There are no known workarounds...

7.5CVSS7.1AI score0.00214EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-48168

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00214EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/02/11 12:0 a.m.4 views

PT-2025-6243 · Misskey · Misskey

Name of the Vulnerable Software and Affected Versions: Misskey versions 12.109.0 through 2025.2.0-alpha.0 Description: Misskey is an open source, federated social media platform. A login token named token is stored in a cookie for authentication purposes in Bull Dashboard, but this remains...

8.1CVSS6.9AI score0.00271EPSS
Exploits0References6
NVD
NVD
added 2023/10/04 9:15 p.m.10 views

CVE-2023-43793

Misskey is an open source, decentralized social media platform. Prior to version 2023.9.0, by editing the URL, a user can bypass the authentication of the Bull dashboard, which is the job queue management UI, and access it. Version 2023.9.0 contains a fix. There are no known workarounds...

7.5CVSS7.7AI score0.00214EPSS
Exploits0References3
CVE
CVE
added 2023/10/04 8:21 p.m.60 views

CVE-2023-43793

Misskey before version 2023.9.0 is vulnerable: by editing the URL, an attacker can bypass authentication for the Bull dashboard (the job queue UI) and access it. The Red Hat, NVD, OSV, and other connected sources consistently describe this as an authentication bypass affecting Misskey prior to 20...

7.5CVSS7.7AI score0.00214EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/04 8:21 p.m.12 views

CVE-2023-43793 Misskey allows users to bypass authentication of Bull dashboard

Misskey is an open source, decentralized social media platform. Prior to version 2023.9.0, by editing the URL, a user can bypass the authentication of the Bull dashboard, which is the job queue management UI, and access it. Version 2023.9.0 contains a fix. There are no known workarounds...

7.5CVSS7AI score0.00214EPSS
Exploits0References3
Cvelist
Cvelist
added 2023/10/04 8:21 p.m.13 views

CVE-2023-43793 Misskey allows users to bypass authentication of Bull dashboard

Misskey is an open source, decentralized social media platform. Prior to version 2023.9.0, by editing the URL, a user can bypass the authentication of the Bull dashboard, which is the job queue management UI, and access it. Version 2023.9.0 contains a fix. There are no known workarounds...

7.5CVSS7.9AI score0.00214EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/10/04 12:0 a.m.1 views

Misskey Authorization Issues Vulnerabilities

Misskey is a suite of micro-blogging platforms. An authorization issue vulnerability exists in versions of Misskey prior to 2023.9.0 that stems from the ability to bypass authentication in the Bull dashboard...

7.5CVSS6.9AI score0.00214EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/10/04 12:0 a.m.2 views

PT-2023-28985 · Misskey · Misskey

Name of the Vulnerable Software and Affected Versions: Misskey versions prior to 2023.9.0 Description: Misskey is an open source, decentralized social media platform. A user can bypass the authentication of the Bull dashboard, which is the job queue management UI, by editing the URL. This allows...

7.5CVSS7.6AI score0.00214EPSS
Exploits0References8
Rows per page
Query Builder