Skip to content
OpenAdvisories

Product · nexryai

concorde

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2025-24900

    Concorde CSRF vulnerability due to insecure configuration of authentication cookie attributes

    Concorde, formerly know as Nexkey, is a fork of the federated microblogging platform Misskey. Due to a lack of CSRF countermeasures and improper settings of cookies for MediaProxy authentication, there is a vulnerability that allows MediaProxy authentication …

    nexryai concorde