CVE-2024-52591

Misskey is an open source, federated social media platform. In affected versions missing validation in "ApRequestService.signedGet" and "HttpRequestService.getActivityJson" allows an attacker to create fake user profiles and forged notes. The spoofed users will appear to be from a different...