CVE-2021-39169

Misskey is a decentralized microblogging platform. In versions of Misskey prior to 12.51.0, malicious actors can use the web client built-in dialog to display a malicious string, leading to cross-site scripting XSS. XSS could compromise the API request token. This issue has been fixed in version...

CVE-2021-39169

CVE-2021-39169 affects Misskey prior to version 12.51.0. The vulnerability is a cross-site scripting (XSS) flaw where the web client’s built-in dialog can display a malicious string, potentially compromising the API request token. A fix exists in version 12.51.0; upgrading is the recommended reme...

CVE-2021-39169 XSS vulnerability using dialog

Misskey is a decentralized microblogging platform. In versions of Misskey prior to 12.51.0, malicious actors can use the web client built-in dialog to display a malicious string, leading to cross-site scripting XSS. XSS could compromise the API request token. This issue has been fixed in version...