Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
joinmastodon mastodon vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2022-24307
Mastodon prior to 3.3.2 and 3.4.x prior to 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. (JSON-LD signing has been supported since version 1.6.0.)
Joinmastodon Mastodon
7.5
CVSSv2
CVE-2018-21018
Mastodon prior to 2.6.3 mishandles timeouts of incompletely established sessions.
Joinmastodon Mastodon
5
CVSSv2
CVE-2022-31263
app/models/user.rb in Mastodon prior to 3.5.0 allows a bypass of e-mail restrictions.
Joinmastodon Mastodon
4.3
CVSSv2
CVE-2022-0432
Prototype Pollution in GitHub repository mastodon/mastodon before 3.5.0.
Joinmastodon Mastodon
NA
CVE-2024-23832
Mastodon is a free, open-source social network server based on ActivityPub Mastodon allows configuration of LDAP for authentication. Due to insufficient origin validation in all Mastodon, attackers can impersonate and take over any remote account. Every Mastodon version before 3....
Joinmastodon Mastodon
1 Article
NA
CVE-2023-42450
Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 4.2.0-beta1 and prior to version 4.2.0-rc2, by crafting specific input, attackers can inject arbitrary data into HTTP requests issued by Mastodon. This can be used to perform confused ...
Joinmastodon Mastodon 4.2.0
NA
CVE-2023-42451
Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 3.5.14, 4.0.10, 4.1.8, and 4.2.0-rc2, under certain circumstances, attackers can exploit a flaw in domain name normalization to spoof domains they do not own. Versions 3.5.14, 4.0.10, 4....
Joinmastodon Mastodon 4.2.0
Joinmastodon Mastodon
NA
CVE-2023-42452
Mastodon is a free, open-source social network server based on ActivityPub. In versions on the 4.x branch prior to versions 4.0.10, 4.2.8, and 4.2.0-rc2, under certain conditions, attackers can abuse the translation feature to bypass the server-side HTML sanitization, allowing un...
Joinmastodon Mastodon 4.2.0
Joinmastodon Mastodon
NA
CVE-2023-36462
Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 2.6.0 and prior to versions 3.5.9, 4.0.5, and 4.1.3, an attacker can craft a verified profile link using specific formatting to conceal arbitrary parts of the link, enabling it to appe...
Joinmastodon Mastodon
NA
CVE-2023-36459
Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 1.3 and prior to versions 3.5.9, 4.0.5, and 4.1.3, an attacker using carefully crafted oEmbed data can bypass the HTML sanitization performed by Mastodon and include arbitrary HTML in ...
Joinmastodon Mastodon
1 Article
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27802
template injection
CVE-2024-0044
code injection
CVE-2024-35474
CVE-2024-27857
CVE-2024-23251
CVE-2024-23692
physical
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »