high8.6
CVE-2023-49095
nexkey is a microblogging platform.
Impact
nexkey is a microblogging platform. Insufficient validation of ActivityPub requests received in inbox could allow any user to impersonate another user in certain circumstances. This issue has been patched in version 12.122.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nexryai | Nexkey | before 12.122.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/nexryai/nexkey/commit/b96da0eac5a1e75abba94cf926f1251842829bab
- https://github.com/nexryai/nexkey/security/advisories/GHSA-fpxw-rw9v-2gmx
- https://github.com/nexryai/nexkey/commit/b96da0eac5a1e75abba94cf926f1251842829bab
- https://github.com/nexryai/nexkey/security/advisories/GHSA-fpxw-rw9v-2gmx