PT-2024-35378 · Misskey · Misskey

Name of the Vulnerable Software and Affected Versions: Misskey versions prior to 2024.11.0-alpha.3 Description: Misskey is an open source, federated social media platform. Some APIs using HttpRequestService do not properly check the target host. This issue allows an attacker to send POST or GET...