← Back

CVE-2019-1020010

nvd nist
Published: Jul 29, 2019Modified: Jun 17, 2026

JSON object

Loading...
6.1
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

Misskey before 10.102.4 allows hijacking a user's token.

Affected (27)

Products: Misskey: Misskey
Misskey
1 product
Misskey
Configuration A
27 vulnerable
Vulnerable SoftwareAffected Versions
Misskey
Misskey
From 10.46.0 to 10.102.4
Misskey
From 11.0.0 to 11.20.2
Misskey
Version 11.0.0 alpha10
Misskey
Version 11.0.0 alpha1
Misskey
Version 11.0.0 alpha2
Misskey
Version 11.0.0 alpha3
Misskey
Version 11.0.0 alpha4
Misskey
Version 11.0.0 alpha5
Misskey
Version 11.0.0 alpha6
Misskey
Version 11.0.0 alpha7
Misskey
Version 11.0.0 alpha8
Misskey
Version 11.0.0 beta10
Misskey
Version 11.0.0 beta11
Misskey
Version 11.0.0 beta12
Misskey
Version 11.0.0 beta13
Misskey
Version 11.0.0 beta14
Misskey
Version 11.0.0 beta15
Misskey
Version 11.0.0 beta16
Misskey
Version 11.0.0 beta1
Misskey
Version 11.0.0 beta2
Misskey
Version 11.0.0 beta3
Misskey
Version 11.0.0 beta4
Misskey
Version 11.0.0 beta5
Misskey
Version 11.0.0 beta6
Misskey
Version 11.0.0 beta7
Misskey
Version 11.0.0 beta8
Misskey
Version 11.0.0 beta9

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

Source: josh@bress.net
ExploitMitigationThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitMitigationThird Party Advisory

Timeline

No history available yet.