CVE-2023-49095
nexkey allows arbitrary users to impersonate any remote user due to missing signature validation
Résumé
nexkey allows arbitrary users to impersonate any remote user due to missing signature validation
Description d'origine
La description telle que publiée par la source (souvent en anglais).
nexkey is a microblogging platform. Insufficient validation of ActivityPub requests received in inbox could allow any user to impersonate another user in certain circumstances. This issue has been patched in version 12.122.2.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com