Arthur Besse@lemmy.ml to

Fediverse@lemmy.mlEnglish · 10 months ago

Mastodon security update: every version prior to today's is vulnerable to remote user impersonation and takeover

cross-posted to:
[email protected]

191

Mastodon security update: every version prior to today's is vulnerable to remote user impersonation and takeover

Arthur Besse@lemmy.ml to

Fediverse@lemmy.mlEnglish · 10 months ago

cross-posted to:
[email protected]

Remote user impersonation and takeover

### Summary Due to insufficient origin validation in all Mastodon, attackers can impersonate and take over any remote account. Every Mastodon version prior to 3.5.17 is vulnerable, as well as...

Chat

AngieStone 🌳 :polarbear:@mastodon.social
link
fedilink
arrow-up
6·
10 months ago
@cypherpunks
German news:
https://www.heise.de/news/Mastodon-Diebstahl-beliebiger-Identitaeten-im-foederierten-Kurznachrichtendienst-9615961.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege
- androidul@lemmy.ml
  link
  fedilink
  arrow-up
  1·
  10 months ago
  nett hier

Fediverse@lemmy.ml

fediverse@lemmy.ml

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: [email protected]

A community dedicated to fediverse news and discussion.

Fediverse is a portmanteau of “federation” and “universe”.

Getting started on Fediverse;

What is the fediverse?
- Short ver.
- Full ver.
Fediverse Platforms
How to run your own community

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

54 users / day
143 users / week
447 users / month
3.09K users / 6 months
1 local subscriber
17.8K subscribers
1.23K Posts
16K Comments
Modlog