Vulnerabilitycritical

Mastodon Social Network Patches Critical Flaws Allowing Server Takeover

The Hacker Newsby @TheHackersNewsJul 7, 2023 · 12:55 UTC (Jul 7, 2023)1 min read2

Read at thehackernews.com

Analyze CVE-2023-36460 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-36460 CVE-2023-36459

Tags: cve-2023-36460 cve-2023-36459 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-36460 +1 related CVE CVE-2023-36459	Mastodon: 4.0.5, and 4.1.3, attackers using carefully crafted media files can cause Mastodon's media processing code to create arbitrary…	9.9 group max	40%		Jul 6, 2023

From the original article

1 min read at thehackernews.com

 Swati Khandelwal  Jul 07, 2023 Vulnerability / Social Media Mastodon, a popular decentralized social network, has released a security update to fix critical vulnerabilities that could expose millions of users to potential attacks. Mastodon is known for its federated model, consisting of thousands of separate servers called "instances," and it has over 14 million users across more than 20,000 instances.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.