Vulnerabilities

TI-2023-28521 CVE-2023-52077

External apps using tokens issued by administrators and moderators can call admin APIs

MEDIUM 43

Nexkey is a lightweight fork of Misskey v12 optimized for small to medium size servers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00693 Published 2023-12-27 Fixed in 12.23Q4.5 CWE-863

TI-2023-26760 CVE-2023-49095

MEDIUM 44

nexkey is a microblogging platform.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00565 Published 2023-11-30 Fixed in 12.122.2 CWE-20

TI-2023-23496 CVE-2023-43805

MEDIUM 40

Nexkey is a fork of Misskey, an open source, decentralized social media platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00795 Published 2023-10-04 Fixed in 12.121.9 CWE-287