CVE-2023-52077

Summary

CVE-2023-52077 is a vulnerability affecting the Nexkey platform, a lightweight fork of Misskey v12. Before version 12.23Q4.5, Nexkey inadvertently granted external apps, issued tokens by administrators and moderators, the ability to access admin APIs. Consequently, malicious third-party apps could manipulate server settings, compromise object storage, and even gain access to email server credentials. This issue has been effectively addressed in the latest patch, 12.23Q4.5.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.