this post was submitted on 01 Feb 2024
175 points (99.4% liked)

Fediverse

17698 readers
2 users here now

A community dedicated to fediverse news and discussion.

Fediverse is a portmanteau of "federation" and "universe".

Getting started on Fediverse;

founded 5 years ago
MODERATORS
deadsuperhero@lemmy.ml
wakest@lemmy.ml
175
Mastodon security update: every version prior to today's is vulnerable to remote user impersonation and takeover (github.com)
submitted 2 years ago by cypherpunks@lemmy.ml to c/fediverse@lemmy.ml
9 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[โ€“] redcalcium@lemmy.institute 29 points 2 years ago (1 children)

This advisory will be edited with more details on 2024/02/15, when admins have been given some time to update, as we think any amount of detail would make it very easy to come up with an exploit.

But the commit to fix insufficient origin validation is already visible right there in the repo?

[โ€“] losttourist@kbin.social 31 points 2 years ago

Without a published POC there's a slightly longer window before clueless script kiddies start having a go at exploiting the vulnerability, though.