CVE-2023-43793
Misskey allows users to bypass authentication of Bull dashboard
Résumé
Misskey allows users to bypass authentication of Bull dashboard
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Misskey is an open source, decentralized social media platform. Prior to version 2023.9.0, by editing the URL, a user can bypass the authentication of the Bull dashboard, which is the job queue management UI, and access it. Version 2023.9.0 contains a fix. There are no known workarounds.
Références
- advisory github.com
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com