Arthur BesseA to

FediverseEnglish · 1 year ago

Mastodon security update: every version prior to today's is vulnerable to remote user impersonation and takeover

217

Mastodon security update: every version prior to today's is vulnerable to remote user impersonation and takeover

Arthur BesseA to

FediverseEnglish · 1 year ago

Remote user impersonation and takeover

### Summary Due to insufficient origin validation in all Mastodon, attackers can impersonate and take over any remote account. Every Mastodon version prior to 3.5.17 is vulnerable, as well as...

Chat

triplenadir@lemmygrad.ml
link
fedilink
arrow-up
1·
1 year ago
not the person you’re replying to but yes, anyone on an unpatched server is vulnerable

Fediverse

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !fediverse@lemmy.ml

A community dedicated to fediverse news and discussion.

Fediverse is a portmanteau of “federation” and “universe”.

Getting started on Fediverse;

What is the fediverse?
- Short ver.
- Full ver.
Fediverse Platforms
How to run your own community

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

146 users / day
628 users / week
1.44K users / month
3.34K users / 6 months
5.54K local subscribers
18K subscribers
1.53K Posts
19.3K Comments
Modlog