CVE-2024-52593

Misskey is an open source, federated social media platform.In affected versions missing validation in NoteCreateService.insertNote, ApPersonService.createPerson, and ApPersonService.updatePerson allows an attacker to control the target of any "origin" links such as the "view on remote instance"...

CVE-2024-52593

creationtimestamp| type| source ---|---|--- 2024-12-18 19:21:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113675448907156149 2024-12-18 22:03:58+00:00| seen| https://t.me/cvedetector/13248 2025-09-15 13:28:32+00:00| seen| MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f 2025-09-16...

CVE-2024-52593

Misskey (open source, federated social platform) has a vulnerability from missing validation in NoteCreateService.insertNote, ApPersonService.createPerson, and ApPersonService.updatePerson. An attacker can set the target of any origin links (e.g., the “view on remote instance” banner) to any HTTP...

CVE-2024-52593 Missing validation allows spoofed "origin" links in Misskey

Misskey is an open source, federated social media platform.In affected versions missing validation in NoteCreateService.insertNote, ApPersonService.createPerson, and ApPersonService.updatePerson allows an attacker to control the target of any "origin" links such as the "view on remote instance"...