CVE-2024-23832 Mastodon Vulnerability: Remote user impersonation and takeovergithub.com/mastodon 21 pointsniel2 years ago3 commentsSaveHideCopy link On HNComments−nielOP2yFixed in Mastodon v4.2.5 https://github.com/mastodon/mastodon/releases/tag/v4.2.5−M2Ys4U2yAlso 4.1.13, 4.0.13, and 3.5.17 (despite the fact the latter two branches are end-of-life)−Kye2yglitch-soc also has a patch available for it.
Comments
Fixed in Mastodon v4.2.5 https://github.com/mastodon/mastodon/releases/tag/v4.2.5
Also 4.1.13, 4.0.13, and 3.5.17 (despite the fact the latter two branches are end-of-life)
glitch-soc also has a patch available for it.