PT-2019-11626 · Misskey · Misskey

CVE-2019-1020010

Published

2019-07-29

Updated

2019-09-05

CVSS v3.1

6.1

Medium

Vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Misskey versions prior to 10.102.4

Description: The issue allows for the hijacking of a user's token, which could lead to unauthorized access.

Recommendations: For versions prior to 10.102.4, update to version 10.102.4 or later to resolve the issue.

Exploit

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2019-1020010

GHSA-6QW9-6JXQ-XJ3P

Misskey