CVE:CVE-2019-1020010
CNNVD:CNNVD-201907-1435
Misskey是一套微型博客平台。
Misskey 10.102.4之前版本中存在安全漏洞。攻击者可利用该漏洞劫持用户令牌。
solution:Upgrade misskey misskey to a higher version than 10.102.4,11.20.2,11.0.0:alpha1,11.0.0:alpha10,11.0.0:alpha2,11.0.0:alpha3,11.0.0:alpha4,11.0.0:alpha5,11.0.0:alpha6,11.0.0:alpha7,11.0.0:alpha8,11.0.0:beta1,11.0.0:beta10,11.0.0:beta11,11.0.0:beta12,11.0.0:beta13,11.0.0:beta14,11.0.0:beta15,11.0.0:beta16,11.0.0:beta2,11.0.0:beta3,11.0.0:beta4,11.0.0:beta5,11.0.0:beta6,11.0.0:beta7,11.0.0:beta8,11.0.0:beta9,and avoid the version [10.46.0,10.102.4),[11.0.0,11.20.2),11.0.0:alpha1,11.0.0:alpha10,11.0.0:alpha2,11.0.0:alpha3,11.0.0:alpha4,11.0.0:alpha5,11.0.0:alpha6,11.0.0:alpha7,11.0.0:alpha8,11.0.0:beta1,11.0.0:beta10,11.0.0:beta11,11.0.0:beta12,11.0.0:beta13,11.0.0:beta14,11.0.0:beta15,11.0.0:beta16,11.0.0:beta2,11.0.0:beta3,11.0.0:beta4,11.0.0:beta5,11.0.0:beta6,11.0.0:beta7,11.0.0:beta8,11.0.0:beta9