Untitled attachment

Notices where this attachment appears

1. Frederic Jacobs (fj@mastodon.social)'s status on Friday, 02-Feb-2024 07:13:11 JST Frederic Jacobs

   Thank you @arcanicanis for making us users on here safer and reporting this critical Mastodon vulnerability.

   And @Gargron and team for the prompt fix and patching of mastodon.social.

   If your instance isn't patched, you should probably ping your admin.

   "Due to insufficient origin validation in all Mastodon, attackers can impersonate and take over any remote account.”

   https://github.com/mastodon/mastodon/security/advisories/GHSA-3fjr-858r-92rw

   #Mastodon #MastoSec #CVE_2024_23832 #MastoAdmin