CVE-2019-1020010: XSS
Published Jul 29, 2019
·Updated
Misskey before 10.102.4 allows hijacking a user's token.
Affected Software
27 affected components
Misskey Misskey>=10.46.0<10.102.4
Misskey Misskey>=11.0.0<11.20.2
Misskey Misskey=11.0.0-alpha1
Misskey Misskey=11.0.0-alpha10
Misskey Misskey=11.0.0-alpha2
Misskey Misskey=11.0.0-alpha3
Misskey Misskey=11.0.0-alpha4
Misskey Misskey=11.0.0-alpha5
Misskey Misskey=11.0.0-alpha6
Misskey Misskey=11.0.0-alpha7
Misskey Misskey=11.0.0-alpha8
Misskey Misskey=11.0.0-beta1
Misskey Misskey=11.0.0-beta10
Misskey Misskey=11.0.0-beta11
Misskey Misskey=11.0.0-beta12
Misskey Misskey=11.0.0-beta13
Misskey Misskey=11.0.0-beta14
Misskey Misskey=11.0.0-beta15
Misskey Misskey=11.0.0-beta16
Misskey Misskey=11.0.0-beta2
Misskey Misskey=11.0.0-beta3
Misskey Misskey=11.0.0-beta4
Misskey Misskey=11.0.0-beta5
Misskey Misskey=11.0.0-beta6
Misskey Misskey=11.0.0-beta7
Misskey Misskey=11.0.0-beta8
Misskey Misskey=11.0.0-beta9
Event History
Jul 29, 2019
CVE Published
via MITRE·12:12 PM
Data Sourced
via MITRE·12:12 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2019-1020010.
2
What is the severity of CVE-2019-1020010?
The severity of CVE-2019-1020010 is medium.
3
What does CVE-2019-1020010 allow?
CVE-2019-1020010 allows hijacking a user's token.
4
Which versions of Misskey are affected by CVE-2019-1020010?
Versions of Misskey before 10.102.4 are affected by CVE-2019-1020010.
5
How can I fix CVE-2019-1020010?
To fix CVE-2019-1020010, update Misskey to version 10.102.4 or later.