CVE-2023-43805

Nexkey is a fork of Misskey, an open source, decentralized social media platform. Prior to version 12.121.9, incomplete URL validation can allow users to bypass authentication for access to the job queue dashboard. Version 12.121.9 contains a fix for this issue. As a workaround, it may be possible to avoid this by blocking access using tools such as Cloudflare's WAF.

• CWE-287

• https://github.com/misskey-dev/misskey/security/advisories/GHSA-9fj2-gjcf-cqqcNot Applicable
• https://github.com/nexryai/nexkey/commit/d89575c521fd4492f5e2ba5a221c5e8f1382081dPatch
• https://github.com/nexryai/nexkey/security/advisories/GHSA-g8w5-568f-ffwfVendor Advisory
• https://github.com/misskey-dev/misskey/security/advisories/GHSA-9fj2-gjcf-cqqcNot Applicable
• https://github.com/nexryai/nexkey/commit/d89575c521fd4492f5e2ba5a221c5e8f1382081dPatch
• https://github.com/nexryai/nexkey/security/advisories/GHSA-g8w5-568f-ffwfVendor Advisory

Published

Oct 4, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-4380A logic flaw exists in Ansible Automation platform. Whenever…6.3
• CVE-2023-43800Arduino Create Agent is a package to help manage Arduino dev…7.8
• CVE-2023-43801Arduino Create Agent is a package to help manage Arduino dev…7.1
• CVE-2023-43802Arduino Create Agent is a package to help manage Arduino dev…7.8
• CVE-2023-43803Arduino Create Agent is a package to help manage Arduino dev…7.1
• CVE-2023-43804urllib3 is a user-friendly HTTP client library for Python. u…8.1
• CVE-2023-43809Soft Serve is a self-hostable Git server for the command lin…7.5
• CVE-2023-4381Unverified Password Change in GitHub repository instantsoft/…4.3
• CVE-2023-43810OpenTelemetry, also known as OTel for short, is a vendor-neu…7.5
• CVE-2023-43813GLPI is a free asset and IT management software package. Sta…8.8
• CVE-2023-43814Discourse is an open source platform for community discussio…3.7
• CVE-2023-43815A buffer overflow vulnerability exists in Delta Electronics …7.8