CVE-2024-32983

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Misskey is an open source, decentralized microblogging platform. Misskey doesn't perform proper normalization on the JSON structures of incoming signed ActivityPub activity objects before processing them, allowing threat actors to spoof the contents of signed activities and impersonate the authors of the original activities. This vulnerability is fixed in 2024.5.0.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published: Jun 3, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-329847.5Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. The Rust implementation of the Yamux stream multiplexer use CVE-2024-329855.9Stellar-core is a reference implementation for the peer-to-peer agent that manages the Stellar network. Prior to 20.4.0, core nodes could be CVE-2024-329869.6PWAsForFirefox is a tool to install, manage and use Progressive Web Apps (PWAs) in Mozilla Firefox. Due to improper sanitization of web app CVE-2024-329877.5Microsoft SharePoint Server Information Disclosure Vulnerability CVE-2024-329887.5'OfferBox' App for Android versions 2.0.0 to 2.3.17 and 'OfferBox' App for iOS versions 2.1.7 to 2.6.14 use a hard-coded secret key for JWT.CVE-2024-329897.5Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affec CVE-2024-32997.8Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from CVE-2024-329907.5Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect CVE-2024-329919.8Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availab CVE-2024-329927.5Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect availabilit CVE-2024-329935.5Out-of-bounds access vulnerability in the memory module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-329955.5Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect availability.