[email protected]English • 2 years ago

TootRoot | Mastodon had a Critical Security Vulnerability

1

cross-posted to:
fediverse
[email protected]

6

TootRoot | Mastodon had a Critical Security Vulnerability

[email protected]English • 2 years ago

1

cross-posted to:
fediverse
[email protected]

Mastodon had a Critical Security Vulnerability

In this video I discuss the recent security updates to Mastodon to fix critical security vulnerabilities that allowed for cross site scripting through oEmbed...

Security advisorys: https://github.com/mastodon/mastodon/security

Chat

ruffslOP
link
fedilink
English
2•2 years ago
For anybody wondering what the Mastodon security issue is - CVE-2023-36460, you can send a toot which makes a webshell on instances that process said toot. #CVE202336460 #TootRoot

https://cyberplace.social/@GossiTheDog/110667416012211236