cve/2023/CVE-2023-49079.md

### [CVE-2023-49079](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49079)
![](https://img.shields.io/static/v1?label=Product&message=misskey&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20%3C%202023.11.1-beta.1%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-347%3A%20Improper%20Verification%20of%20Cryptographic%20Signature&color=brighgreen)

### Description

Misskey is an open source, decentralized social media platform. Misskey's missing signature validation allows arbitrary users to impersonate any remote user. This issue has been patched in version 2023.11.1-beta.1.

### POC

#### Reference
- https://github.com/misskey-dev/misskey/security/advisories/GHSA-3f39-6537-3cgc

#### Github
No PoCs found on GitHub currently.