Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2025/05/05 6:38 p.m.23 views

CVE-2025-46559 Misskey Directory Traversal Vulnerability in AiScript via `Mk:api`

Misskey is an open source, federated social media platform. Starting in version 12.31.0 and prior to version 2025.4.1, missing validation in Mk:api allows malicious AiScript code to access additional endpoints that it isn't designed to have access to. The missing validation allows malicious...

5.4CVSS0.00421EPSS
SaveExploits1References2
OSV
OSV
added 2025/05/05 6:38 p.m.13 views

CVE-2025-46559 Misskey Directory Traversal Vulnerability in AiScript via `Mk:api`

Misskey is an open source, federated social media platform. Starting in version 12.31.0 and prior to version 2025.4.1, missing validation in Mk:api allows malicious AiScript code to access additional endpoints that it isn't designed to have access to. The missing validation allows malicious...

5.4CVSS7AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/05/05 6:38 p.m.11 views

CVE-2025-46559 Misskey Directory Traversal Vulnerability in AiScript via `Mk:api`

Misskey is an open source, federated social media platform. Starting in version 12.31.0 and prior to version 2025.4.1, missing validation in Mk:api allows malicious AiScript code to access additional endpoints that it isn't designed to have access to. The missing validation allows malicious...

5.4CVSS5.5AI score0.00421EPSS
SaveExploits1References2
Rows per page
Query Builder