Skip to content

Top New Best Ask Show Jobs

CVE-2024-23832 Mastodon Vulnerability: Remote user impersonation and takeover | Better HN

CVE-2024-23832 Mastodon Vulnerability: Remote user impersonation and takeover (opens in new tab)

(github.com)

21 pointsniel2y ago3 comments

3 comments

nielOP2y ago

Fixed in Mastodon v4.2.5 https://github.com/mastodon/mastodon/releases/tag/v4.2.5

M2Ys4U2y ago

Also 4.1.13, 4.0.13, and 3.5.17 (despite the fact the latter two branches are end-of-life)

Kye2y ago

glitch-soc also has a patch available for it.

j / k navigate · click thread line to collapse