5 matches found
CVE-2024-52590
Misskey is an open source, federated social media platform. In affected versions missing validation in ApRequestService.signedGet allows an attacker to create fake user profiles that appear to be from a different instance than the one where they actually exist. These profiles can be used to...
CVE-2024-52590
Misskey is an open source, federated social media platform. In affected versions missing validation in ApRequestService.signedGet allows an attacker to create fake user profiles that appear to be from a different instance than the one where they actually exist. These profiles can be used to...
CVE-2024-52590 Missing validation allows spoofed profiles in Misskey
Misskey is an open source, federated social media platform. In affected versions missing validation in ApRequestService.signedGet allows an attacker to create fake user profiles that appear to be from a different instance than the one where they actually exist. These profiles can be used to...
CVE-2024-52590
Misskey vulnerability CVE-2024-52590 is caused by missing validation in ApRequestService.signedGet, enabling an attacker to create spoofed profiles that appear to originate from another instance. Affected Misskey versions prior to 2024.11.0-alpha.3 allow impersonation of existing users on the tar...
CVE-2024-52590 Missing validation allows spoofed profiles in Misskey
Misskey is an open source, federated social media platform. In affected versions missing validation in ApRequestService.signedGet allows an attacker to create fake user profiles that appear to be from a different instance than the one where they actually exist. These profiles can be used to...