Misskey kayıtları
misskey üreticisine ait 28 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %71,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-20 Improper Input Validation6
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-285 Improper Authorization2
- CWE-347 Improper Verification of Cryptographic Signature2
- CWE-346 Origin Validation Error1
- CWE-307 Improper Restriction of Excessive Authentication Attempts1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
28 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-24812İstismar yok | SQL injection of notes/search-by-tagmisskey · misskey · CWE-89 | Kritik9,8 | — | %0,7 | 22 Şub 2023 |
38İzleyin | CVE-2023-52139İstismar yok | Misskey vulnerable to improper authorization when accessing with third-party applicationmisskey · misskey · CWE-285 | Kritik9,6 | — | %0,5 | 29 Ara 2023 |
37İzleyin | CVE-2025-25306İstismar yok | Misskey's Incomplete Patch of CVE-2024-52591 Leads to Forgery of Federated Notesmisskey · misskey · CWE-346 | Kritik9,3 | — | %0,2 | 10 Mar 2025 |
36İzleyin | CVE-2026-28431İstismar yok | Misskey lacks proper authorization checks and input validationmisskey · misskey · CWE-285 | Kritik9,2 | — | %0,4 | 10 Mar 2026 |
35İzleyin | CVE-2024-25636İstismar yok | Lack of media type verification of Activity Streams objects allows impersonation and takeover of remote accountsmisskey · misskey · CWE-434 | Yüksek8,8 | — | %0,7 | 19 Şub 2024 |
35İzleyin | CVE-2024-52590İstismar yok | Missing validation allows spoofed profiles in Misskeymisskey · misskey · CWE-20 | Yüksek8,8 | — | %0,4 | 18 Ara 2024 |
35İzleyin | CVE-2024-52591İstismar yok | Missing validation allows spoofed profiles and notes in Misskeymisskey · misskey · CWE-20 | Yüksek8,8 | — | %0,3 | 18 Ara 2024 |
32İzleyin | CVE-2025-24896İstismar yok | Misskey allows token to remain valid in cookie after signing outmisskey · misskey · CWE-613 | Yüksek8,1 | — | %0,6 | 11 Şub 2025 |
32İzleyin | CVE-2025-24897İstismar yok | Misskey CSRF vulnerability due to insecure configuration of authentication cookie attributesmisskey · misskey · CWE-352 | Yüksek8,2 | — | %0,1 | 11 Şub 2025 |
30İzleyin | CVE-2023-43793İstismar yok | Misskey allows users to bypass authentication of Bull dashboardmisskey · misskey · CWE-287 | Yüksek7,5 | — | %0,7 | 4 Eki 2023 |
30İzleyin | CVE-2025-46559İstismar yok | Misskey Directory Traversal Vulnerability in AiScript via `Mk:api`misskey · misskey · CWE-22 | Yüksek7,5 | — | %0,4 | 5 May 2025 |
30İzleyin | CVE-2023-49079İstismar yok | Misskey's missing signature validation allows arbitrary users to impersonate any remote user.misskey · misskey · CWE-347 | Yüksek7,5 | — | %0,4 | 29 Kas 2023 |
30İzleyin | CVE-2024-32983İstismar yok | Misskey allows the impersonation and takeover of remote accounts with unnormalized signed activitiesmisskey · misskey · CWE-863 | Yüksek7,5 | — | %0,4 | 3 Haz 2024 |
28İzleyin | CVE-2025-66402İstismar yok | misskey.js's export data contains private post datamisskey · misskey · CWE-862 | Yüksek7,1 | — | %0,3 | 15 Ara 2025 |
28İzleyin | CVE-2026-28432İstismar yok | HTTP signature verification can be bypassedmisskey · misskey · CWE-347 | Yüksek7,1 | — | %0,2 | 10 Mar 2026 |
27İzleyin | CVE-2025-66482İstismar yok | Misskey has a login rate limit bypass via spoofed X-Forwarded-For headermisskey · misskey · CWE-307 | Orta6,9 | — | %0,3 | 15 Ara 2025 |
27İzleyin | CVE-2024-52592İstismar yok | Missing validation allows spoofed poll updates in Misskeymisskey · misskey · CWE-20 | Orta6,9 | — | %0,3 | 18 Ara 2024 |
26İzleyin | CVE-2021-39195İstismar yok | Server-Side Request Forgery vulnerability in misskeymisskey · misskey · CWE-918 | Orta6,5 | — | %1,1 | 7 Eyl 2021 |
24İzleyin | CVE-2019-1020010Kavram kanıtı | Misskey before 10.102.4 allows hijacking a user's token.misskey · misskey · CWE-79 | Orta6,1 | — | %1,3 | 29 Tem 2019 |
24İzleyin | CVE-2023-24810İstismar yok | Cross site scripting (XSS) vulnerability using authentication callback in Misskeymisskey · misskey · CWE-79 | Orta6,1 | — | %0,4 | 22 Şub 2023 |
24İzleyin | CVE-2023-25154İstismar yok | Cross site scripting (XSS) of ActivityPub URI in misskeymisskey · misskey · CWE-79 | Orta6,1 | — | %0,4 | 22 Şub 2023 |
24İzleyin | CVE-2023-24811İstismar yok | Cross site scripting (XSS) vulnerability using url preview in Misskeymisskey · misskey · CWE-79 | Orta6,1 | — | %0,4 | 22 Şub 2023 |
21İzleyin | CVE-2021-39169İstismar yok | XSS vulnerability using dialogmisskey · misskey · CWE-79 | Orta5,4 | — | %0,7 | 27 Ağu 2021 |
21İzleyin | CVE-2025-46340İstismar yok | Misskey CSS Style Injection Vulnerability In `MkUrlPreview`misskey · misskey · CWE-20 | Orta5,4 | — | %0,2 | 5 May 2025 |
21İzleyin | CVE-2024-52579İstismar yok | Server-Side Request Forgery vulnerability in various APIs in Misskeymisskey · misskey · CWE-20 | Orta5,4 | — | %0,2 | 18 Ara 2024 |
- CVE-2023-2481239İzleyin
SQL injection of notes/search-by-tag
KritikCVSS 9,8İstismar yokEPSS %1misskey · misskey22 Şub 2023
- CVE-2023-5213938İzleyin
Misskey vulnerable to improper authorization when accessing with third-party application
KritikCVSS 9,6İstismar yokEPSS %1misskey · misskey29 Ara 2023
- CVE-2025-2530637İzleyin
Misskey's Incomplete Patch of CVE-2024-52591 Leads to Forgery of Federated Notes
KritikCVSS 9,3İstismar yokEPSS %0misskey · misskey10 Mar 2025
- CVE-2026-2843136İzleyin
Misskey lacks proper authorization checks and input validation
KritikCVSS 9,2İstismar yokEPSS %0misskey · misskey10 Mar 2026
- CVE-2024-2563635İzleyin
Lack of media type verification of Activity Streams objects allows impersonation and takeover of remote accounts
YüksekCVSS 8,8İstismar yokEPSS %1misskey · misskey19 Şub 2024
- CVE-2024-5259035İzleyin
Missing validation allows spoofed profiles in Misskey
YüksekCVSS 8,8İstismar yokEPSS %0misskey · misskey18 Ara 2024
- CVE-2024-5259135İzleyin
Missing validation allows spoofed profiles and notes in Misskey
YüksekCVSS 8,8İstismar yokEPSS %0misskey · misskey18 Ara 2024
- CVE-2025-2489632İzleyin
Misskey allows token to remain valid in cookie after signing out
YüksekCVSS 8,1İstismar yokEPSS %1misskey · misskey11 Şub 2025
- CVE-2025-2489732İzleyin
Misskey CSRF vulnerability due to insecure configuration of authentication cookie attributes
YüksekCVSS 8,2İstismar yokEPSS %0misskey · misskey11 Şub 2025
- CVE-2023-4379330İzleyin
Misskey allows users to bypass authentication of Bull dashboard
YüksekCVSS 7,5İstismar yokEPSS %1misskey · misskey4 Eki 2023
- CVE-2025-4655930İzleyin
Misskey Directory Traversal Vulnerability in AiScript via `Mk:api`
YüksekCVSS 7,5İstismar yokEPSS %0misskey · misskey5 May 2025
- CVE-2023-4907930İzleyin
Misskey's missing signature validation allows arbitrary users to impersonate any remote user.
YüksekCVSS 7,5İstismar yokEPSS %0misskey · misskey29 Kas 2023
- CVE-2024-3298330İzleyin
Misskey allows the impersonation and takeover of remote accounts with unnormalized signed activities
YüksekCVSS 7,5İstismar yokEPSS %0misskey · misskey3 Haz 2024
- CVE-2025-6640228İzleyin
misskey.js's export data contains private post data
YüksekCVSS 7,1İstismar yokEPSS %0misskey · misskey15 Ara 2025
- CVE-2026-2843228İzleyin
HTTP signature verification can be bypassed
YüksekCVSS 7,1İstismar yokEPSS %0misskey · misskey10 Mar 2026
- CVE-2025-6648227İzleyin
Misskey has a login rate limit bypass via spoofed X-Forwarded-For header
OrtaCVSS 6,9İstismar yokEPSS %0misskey · misskey15 Ara 2025
- CVE-2024-5259227İzleyin
Missing validation allows spoofed poll updates in Misskey
OrtaCVSS 6,9İstismar yokEPSS %0misskey · misskey18 Ara 2024
- CVE-2021-3919526İzleyin
Server-Side Request Forgery vulnerability in misskey
OrtaCVSS 6,5İstismar yokEPSS %1misskey · misskey7 Eyl 2021
- CVE-2019-102001024İzleyin
Misskey before 10.102.4 allows hijacking a user's token.
OrtaCVSS 6,1Kavram kanıtıEPSS %1misskey · misskey29 Tem 2019
- CVE-2023-2481024İzleyin
Cross site scripting (XSS) vulnerability using authentication callback in Misskey
OrtaCVSS 6,1İstismar yokEPSS %0misskey · misskey22 Şub 2023
- CVE-2023-2515424İzleyin
Cross site scripting (XSS) of ActivityPub URI in misskey
OrtaCVSS 6,1İstismar yokEPSS %0misskey · misskey22 Şub 2023
- CVE-2023-2481124İzleyin
Cross site scripting (XSS) vulnerability using url preview in Misskey
OrtaCVSS 6,1İstismar yokEPSS %0misskey · misskey22 Şub 2023
- CVE-2021-3916921İzleyin
XSS vulnerability using dialog
OrtaCVSS 5,4İstismar yokEPSS %1misskey · misskey27 Ağu 2021
- CVE-2025-4634021İzleyin
Misskey CSS Style Injection Vulnerability In `MkUrlPreview`
OrtaCVSS 5,4İstismar yokEPSS %0misskey · misskey5 May 2025
- CVE-2024-5257921İzleyin
Server-Side Request Forgery vulnerability in various APIs in Misskey
OrtaCVSS 5,4İstismar yokEPSS %0misskey · misskey18 Ara 2024