Veille CVE

‹ Retour à la liste

CVE-2026-46712

2.3 Faible

Publiée le 04/08/2026 à 00:16 · Modifiée le 23/10/2026 à 23:10 · Analyse NVD reportée · Source : security-advisories@github.com

Description

Misskey is an open source, federated social media platform. Versions 2025.3.2 and later, but prior to 2026.5.4, contain a vulnerability where a lack of proper permission checks allows access to certain data points from the Direct Messages (formerly Chat) feature, regardless of account permissions. This vulnerability occurs whether or not federation is enabled. Notes created with "specified" visibility (formerly "direct" visibility) are not affected. This issue has been fixed in version 2026.5.4.

Traduire en français

Produits concernés

Scores CVSS

VersionScoreSourceVecteur
4.0 2.3 Faible security-advisories@github.com CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Faiblesses (CWE)

Références

Ailleurs