Vulnerabilitycritical
Mastodon Vulnerability Allows Hackers to Hijack Any Decentralized Account
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-36460 | Mastodon: 4.0.5, and 4.1.3, attackers using carefully crafted media files can cause Mastodon's media processing code to create arbitrary… | 9.9 | 40% | ||
| CVE-2024-23832 | Mastodon: Due to insufficient origin validation in all Mastodon, attackers can impersonate and take over any remote account. Every Mastodon… | 9.8 | 2% |
From the original article
1 min read at thehackernews.com
Ravie Lakshmanan Feb 03, 2024 Vulnerability / Social Media The decentralized social network Mastodon has disclosed a critical security flaw that enables malicious actors to impersonate and take over any account. "Due to insufficient origin validation in all Mastodon, attackers can impersonate and take over any remote account," the maintainers said in a terse advisory.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.