CVE-2023-49095
nexkey allows arbitrary users to impersonate any remote user due to missing signature validation
Summary
nexkey allows arbitrary users to impersonate any remote user due to missing signature validation
Original description
The description as published by the source.
nexkey is a microblogging platform. Insufficient validation of ActivityPub requests received in inbox could allow any user to impersonate another user in certain circumstances. This issue has been patched in version 12.122.2.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com