CVE-2024-52592

CVE-2024-52592 – Misskey : Misskey versions prior to 2024.11.0-alpha.3 suffer from missing validation in the ApInboxService.update function, allowing an attacker to modify poll results belonging to another user without authentication beyond a valid signature from any actor on any remote instance....

CVE-2024-52592: Improper Input Validation

Misskey is an open source, federated social media platform. In affected versions missing validation in ApInboxService.update allows an attacker to modify the result of polls belonging to another user. No authentication is required, except for a valid signature from any actor on any remote instanc...