Nexkey is a fork of Misskey, an open source, decentralized social media platform. Prior to version 12.121.9, incomplete URL validation can allow users to bypass authentication for access to the job queue dashboard. Version 12.121.9 contains a fix for this issue. As a workaround, it may be possible to avoid this by blocking access using tools such as Cloudflare's WAF.
History

Fri, 20 Sep 2024 15:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:nexryai:nexkey:*:*:*:*:*:*:*:*
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2023-10-04T20:24:43.110Z

Updated: 2024-09-20T14:55:56.424Z

Reserved: 2023-09-22T14:51:42.340Z

Link: CVE-2023-43805

cve-icon Vulnrichment

Updated: 2024-08-02T19:52:11.345Z

cve-icon NVD

Status : Modified

Published: 2023-10-04T21:15:10.203

Modified: 2024-11-21T08:24:49.337

Link: CVE-2023-43805

cve-icon Redhat

No data.