284 matches found
CVE-2019-1020010
Misskey before 10.102.4 allows hijacking a user's token...
6.1CVSS6.8AI score
SaveExploits0References1
Code injection
Misskey before 10.102.4 allows hijacking a user's token...
4.3CVSS6.3AI score0.01263EPSS
SaveExploits1References1Affected Software1
CVE-2019-1020010
Misskey before 10.102.4 is affected by a vulnerability that allows hijacking a user’s token. Technical sources describe this as a cross‑site scripting flaw affecting Misskey versions prior to 10.102.4, with token theft as the impact. Mitigation: upgrade to 10.102.4 or later. The CVE entry itself ...
6.1CVSS6.2AI score0.01263EPSS
SaveExploits1References1Affected Software1
20