Pricefield | Lemmy
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
Arthur Besse to [email protected]English • 1 year ago

Mastodon security update: every version prior to today's is vulnerable to remote user impersonation and takeover

github.com

external-link
message-square
15
fedilink
  • cross-posted to:
  • [email protected]
  • [email protected]
188
external-link

Mastodon security update: every version prior to today's is vulnerable to remote user impersonation and takeover

github.com

Arthur Besse to [email protected]English • 1 year ago
message-square
15
fedilink
  • cross-posted to:
  • [email protected]
  • [email protected]
Remote user impersonation and takeover
github.com
external-link
### Summary Due to insufficient origin validation in all Mastodon, attackers can impersonate and take over any remote account. Every Mastodon version prior to 3.5.17 is vulnerable, as well as...
  • Atelopus-zeteki
    link
    fedilink
    2•1 year ago

    Hmm, so if one is on iOS, the current version 2023.16, and is vulnerable. Take note apple / mac folx.

    • Arthur BesseOP
      link
      fedilink
      20•1 year ago

      No, this is a server-side vulnerability. Clients do not need to update, instances do.

      • Atelopus-zeteki
        link
        fedilink
        2•1 year ago

        TY!

[email protected]

[email protected]
Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: [email protected]

A community dedicated to fediverse news and discussion.

Fediverse is a portmanteau of “federation” and “universe”.

Getting started on Fediverse;

  • What is the fediverse?
    • Short ver.
    • Full ver.
  • Fediverse Platforms
  • How to run your own community
  • 2 users / day
  • 5 users / week
  • 56 users / month
  • 661 users / 6 months
  • 3 subscribers
  • 945 Posts
  • 13.2K Comments
  • Modlog
  • mods:
  • Sean Tilley
  • wakest
  • UI: 0.18.4
  • BE: 0.18.2
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org