CVE-2023-49095

Publication date

2023-11-30 07:10:10

Family

GitHub_M

State

PUBLISHED

Description

nexkey is a microblogging platform. Insufficient validation of ActivityPub requests received in inbox could allow any user to impersonate another user in certain circumstances. This issue has been patched in version 12.122.2.