Vulnerabilidades en misskey-dev
38 resultadosCVE-2021-39195HIGHServer-Side Request Forgery vulnerability in misskeyEPSS 1.1%CVE-2023-43793HIGHMisskey allows users to bypass authentication of Bull dashboardEPSS 0.8%CVE-2021-39169HIGHXSS vulnerability using dialogEPSS 0.7%CVE-2023-24812HIGHSQL injection of notes/search-by-tagEPSS 0.7%CVE-2024-25636HIGHLack of media type verification of Activity Streams objects allows impersonation and takeover of remote accountsEPSS 0.7%CVE-2026-104816HIGHMisskey: Cross-site scripting in RSS feed item linksEPSS 0.6%CVE-2026-57575MEDIUMMisskey: SSRF bypass in URL PreviewEPSS 0.6%CVE-2025-24896HIGHMisskey allows token to remain valid in cookie after signing outEPSS 0.6%CVE-2026-57574HIGHMisskey: TOTP tokens can be reusedEPSS 0.6%CVE-2023-52139CRITICALMisskey vulnerable to improper authorization when accessing with third-party applicationEPSS 0.5%CVE-2026-103937HIGHMisskey: Denial of service resulting from insufficient cleanup processing during file uploadsEPSS 0.5%CVE-2026-104817HIGHMisskey: Lack of rate limiting and size restrictions in RSS fetching APIEPSS 0.5%CVE-2025-46559MEDIUMMisskey Directory Traversal Vulnerability in AiScript via `Mk:api`EPSS 0.5%CVE-2023-24810HIGHCross site scripting (XSS) vulnerability using authentication callback in MisskeyEPSS 0.4%CVE-2026-46714MEDIUMMisskey: Denial of Service via Uncontrolled Recursion in Theme CompilationEPSS 0.4%CVE-2023-25154HIGHCross site scripting (XSS) of ActivityPub URI in misskeyEPSS 0.4%CVE-2026-48115MEDIUMMisskey: Improper Authorization in the Announcements APIEPSS 0.4%CVE-2023-24811HIGHCross site scripting (XSS) vulnerability using url preview in MisskeyEPSS 0.4%CVE-2024-32983HIGHMisskey allows the impersonation and takeover of remote accounts with unnormalized signed activitiesEPSS 0.4%CVE-2023-49079CRITICALMisskey's missing signature validation allows arbitrary users to impersonate any remote user.EPSS 0.4%