Is CVE-2024-32983 actively exploited?

CVE-2024-32983 has no public evidence of in-the-wild exploitation as of 2025-11-25.

What is the CVSS score for CVE-2024-32983?

CVE-2024-32983 has a CVSS score of 8.2 (HIGH severity). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N.

How do I patch CVE-2024-32983?

Patch guidance is available from misskey security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2024-32983.

Fix CVE-2024-32983 - HIGH misskey misskey

Description

Misskey is an open source, decentralized microblogging platform. Misskey doesn't perform proper normalization on the JSON structures of incoming signed ActivityPub activity objects before processing them, allowing threat actors to spoof the contents of signed activities and impersonate the authors of the original activities. This vulnerability is fixed in 2024.5.0.

CVSS Metrics

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Attack Vector: network
Complexity: low
Privileges: none
User Action: none
Scope: unchanged
Confidentiality: low
Integrity: high
Availability: none
Weaknesses: CWE-863 · Incorrect Authorization

Metadata

Primary Vendor: MISSKEY
Published: 6/3/2024
Last Modified: 11/25/2025
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

CVE-2024-32983

Description

CVSS Metrics

Metadata

Affected Products

Remediation Guidance

Executive Summary