CVE-2023-43793
Misskey allows users to bypass authentication of Bull dashboard
概要
Misskey allows users to bypass authentication of Bull dashboard
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Misskey is an open source, decentralized social media platform. Prior to version 2023.9.0, by editing the URL, a user can bypass the authentication of the Bull dashboard, which is the job queue management UI, and access it. Version 2023.9.0 contains a fix. There are no known workarounds.
参照URL
- advisory github.com
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com