CVE-2023-43793
Misskey allows users to bypass authentication of Bull dashboard
Summary
Misskey allows users to bypass authentication of Bull dashboard
Original description
The description as published by the source.
Misskey is an open source, decentralized social media platform. Prior to version 2023.9.0, by editing the URL, a user can bypass the authentication of the Bull dashboard, which is the job queue management UI, and access it. Version 2023.9.0 contains a fix. There are no known workarounds.
References
- advisory github.com
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com