CVE-2023-43793

Misskey is an open source, decentralized social media platform. Prior to version 2023.9.0, by editing the URL, a user can bypass the authentication of the Bull dashboard, which is the job queue management UI, and access it. Version 2023.9.0 contains a fix. There are no known workarounds.

• CWE-287

• https://github.com/misskey-dev/misskey/commit/c9aeccb2ab260ceedc126e6e366da8cd13ece4b2Patch
• https://github.com/misskey-dev/misskey/security/advisories/GHSA-9fj2-gjcf-cqqcVendor Advisory
• https://github.com/nexryai/nexkey/security/advisories/GHSA-g8w5-568f-ffwfNot Applicable
• https://github.com/misskey-dev/misskey/commit/c9aeccb2ab260ceedc126e6e366da8cd13ece4b2Patch
• https://github.com/misskey-dev/misskey/security/advisories/GHSA-9fj2-gjcf-cqqcVendor Advisory
• https://github.com/nexryai/nexkey/security/advisories/GHSA-g8w5-568f-ffwfNot Applicable

Published

Oct 4, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-43788A vulnerability was found in libXpm due to a boundary condit…5.5
• CVE-2023-43789A vulnerability was found in libXpm where a vulnerability ex…5.5
• CVE-2023-4379An issue has been discovered in GitLab EE affecting all vers…7.5
• CVE-2023-43790iTop is an IT service management platform. By manipulating …5.4
• CVE-2023-43791Label Studio is a multi-type data labeling and annotation to…8.8
• CVE-2023-43792baserCMS is a website development framework. In versions 4.6…9.8
• CVE-2023-43794Nocodb is an open source Airtable alternative. Affected vers…4.9
• CVE-2023-43795GeoServer is an open source software server written in Java …9.8
• CVE-2023-43796Synapse is an open-source Matrix homeserver Prior to version…5.3
• CVE-2023-43797BigBlueButton is an open-source virtual classroom. Prior to …5.4
• CVE-2023-43798BigBlueButton is an open-source virtual classroom. BigBlueBu…5.4
• CVE-2023-43799Altair is a GraphQL Client. Prior to version 5.2.5, the Alta…7.8