Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 22/02/2023 Updated: 07/11/2023

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 0

Misskey is an open source, decentralized social media platform. In versions before 13.3.2 the URL preview function is subject to a cross site scripting vulnerability due to insufficient URL validation. Arbitrary JavaScript is executed when a malicious URL is loaded in the `View in Player` or `View in Window` preview. This has been fixed in version 13.3.2. Users are advised to upgrade. Users unable to upgrade should avoid usage of the `View in Player` or `View in Window` functions.

Vulnerable Product	Search on Vulmon	Subscribe to Product
misskey misskey

CWE-79 https://github.com/misskey-dev/misskey/commit/38f9d1e76428bea47c5944c440eab25428c7d99e https://github.com/misskey-dev/misskey/security/advisories/GHSA-vc39-c453-67g3 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-24811

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect