CVE-2023-49079

Misskey is an open source, decentralized social media platform. Misskey's missing signature validation allows arbitrary users to impersonate any remote user. This issue has been patched in version 2023.11.1-beta.1.

• CWE-347

• https://github.com/misskey-dev/misskey/security/advisories/GHSA-3f39-6537-3cgcMitigation, Vendor Advisory
• https://github.com/misskey-dev/misskey/security/advisories/GHSA-3f39-6537-3cgcMitigation, Vendor Advisory

Published

Nov 29, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-49073A stack-based buffer overflow vulnerability exists in the bo…7.2
• CVE-2023-49074A denial of service vulnerability exists in the TDDP functio…7.5
• CVE-2023-49075The Admin Classic Bundle provides a Backend UI for Pimcore. …7.2
• CVE-2023-49076Customer-data-framework allows management of customer data w…6.5
• CVE-2023-49077Mailcow: dockerized is an open source groupware/email suite …6.1
• CVE-2023-49078raptor-web is a CMS for game server communities that can be …6.1
• CVE-2023-4908Inappropriate implementation in Picture in Picture in Google…4.3
• CVE-2023-49080The Jupyter Server provides the backend (i.e. the core servi…4.3
• CVE-2023-49081aiohttp is an asynchronous HTTP client/server framework for …5.3
• CVE-2023-49082aiohttp is an asynchronous HTTP client/server framework for …5.3
• CVE-2023-49083cryptography is a package designed to expose cryptographic p…7.5
• CVE-2023-49084Cacti is a robust performance and fault management framework…8.8