368 matches found
CVE-2021-39169: Improper Neutralization of Input During Web Page Generation
Misskey is a decentralized microblogging platform. In versions of Misskey prior to 12.51.0, malicious actors can use the web client built-in dialog to display a malicious string, leading to cross-site scripting XSS. XSS could compromise the API request token. This issue has been fixed in version...
Misskey Cross-Site Scripting Vulnerability
Misskey is a micro-blogging platform. A cross-site scripting vulnerability exists in versions of Misskey prior to 10.102.4 that can be exploited by an attacker to hijack user tokens...
CVE-2019-1020010
Misskey before 10.102.4 allows hijacking a user's token...
CVE-2019-1020010
Misskey before 10.102.4 allows hijacking a user's token...
Code injection
Misskey before 10.102.4 allows hijacking a user's token...
CVE-2019-1020010
Misskey before 10.102.4 is affected by a vulnerability that allows hijacking a user’s token. Technical sources describe this as a cross‑site scripting flaw affecting Misskey versions prior to 10.102.4, with token theft as the impact. Mitigation: upgrade to 10.102.4 or later. The CVE entry itself ...
