SecurityEnglish · 1 年前

TootRoot | Mastodon had a Critical Security Vulnerability

1

6

TootRoot | Mastodon had a Critical Security Vulnerability

SecurityEnglish · 1 年前

1

Mastodon had a Critical Security Vulnerability

In this video I discuss the recent security updates to Mastodon to fix critical security vulnerabilities that allowed for cross site scripting through oEmbed...

Security advisorys: https://github.com/mastodon/mastodon/security

You must log in or register to comment.

Chat

ruffslOP
link
fedilink
English
arrow-up
2·
1 年前
For anybody wondering what the Mastodon security issue is - CVE-2023-36460, you can send a toot which makes a webshell on instances that process said toot. #CVE202336460 #TootRoot

https://cyberplace.social/@GossiTheDog/110667416012211236

Security

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: [email protected]

A community for discussion about cybersecurity, hacking, cybersecurity news, exploits, bounties etc.

Rules :

All instance-wide rules apply.
Keep it totally legal.
Remember the human, be civil.
Be helpful, don’t be rude.

Icon base by Delapouite under CC BY 3.0 with modifications to add a gradient

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

5 users / day
5 users / week
2 users / month
257 users / 6 months
218 local subscribers
647 subscribers
73 Posts
120 Comments
Modlog

mods:
LinearArray