CVE-2023-49095
nexkey allows arbitrary users to impersonate any remote user due to missing signature validation
概要
nexkey allows arbitrary users to impersonate any remote user due to missing signature validation
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
nexkey is a microblogging platform. Insufficient validation of ActivityPub requests received in inbox could allow any user to impersonate another user in certain circumstances. This issue has been patched in version 12.122.2.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com