Conversation

Notices

1. † top dog :pedomustdie: (dcc@annihilation.social)'s status on Friday, 02-Feb-2024 07:13:10 JST † top dog :pedomustdie:

   in reply to

   • 
   • Frederic Jacobs
   cc @mint
   • Frederic Jacobs (fj@mastodon.social)'s status on Friday, 02-Feb-2024 07:13:11 JST Frederic Jacobs

     • Eugen Rochko
     • arcanicanis

     Thank you @arcanicanis for making us users on here safer and reporting this critical Mastodon vulnerability.

     And @Gargron and team for the prompt fix and patching of mastodon.social.

     If your instance isn't patched, you should probably ping your admin.

     "Due to insufficient origin validation in all Mastodon, attackers can impersonate and take over any remote account.”

     https://github.com/mastodon/mastodon/security/advisories/GHSA-3fjr-858r-92rw

     #Mastodon #MastoSec #CVE_2024_23832 #MastoAdmin