CVE-2023-49095 — nexkey allows arbitrary users to impersonate any remote user due to missing signature validation
nexkey is a microblogging platform. Insufficient validation of ActivityPub requests received in inbox could allow any user to impersonate another user in certain circumstances. …
Published: 2023-11-30 · CVSS: 8.6 · CVSS 3.1
nexkey is a microblogging platform. Insufficient validation of ActivityPub requests received in inbox could allow any user to impersonate another user in certain circumstances. This issue has been patched in version 12.122.2.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7