CVE-2023-36460

🗓️ 06 Jul 2023 19:15:10Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 14 Views

Mastodon server vulnerability allows arbitrary file creation and Remote Code Executio

Reporter	Title	Published	Views	Family All 17
BDU FSTEC	The vulnerability of the Media File Handler component in the web application used for deploying distributed social networks like Mastodon allows a malicious actor to create and re-record arbitrary files within the system.	5 Mar 202400:00	–	bdu_fstec
Circl	CVE-2023-36460	6 Jul 202322:20	–	circl
CNNVD	Mastodon 路径遍历漏洞	6 Jul 202300:00	–	cnnvd
CVE	CVE-2023-36460	6 Jul 202318:39	–	cve
Cvelist	CVE-2023-36460 Mastodon vulnerable to arbitrary file creation through media attachments	6 Jul 202318:39	–	cvelist
Malwarebytes	"TootRoot" Mastodon vulnerabilities fixed: Admins, patch now!	11 Jul 202302:00	–	malwarebytes
OSV	BIT-MASTODON-2023-36460 Mastodon vulnerable to arbitrary file creation through media attachments	6 Mar 202410:56	–	osv
OSV	CVE-2023-36460 Mastodon vulnerable to arbitrary file creation through media attachments	6 Jul 202318:39	–	osv
Prion	Design/Logic Flaw	6 Jul 202319:15	–	prion
Positive Technologies	PT-2023-8743 · Mastodon · Mastodon	6 Jul 202300:00	–	ptsecurity

NVD

Node

joinmastodon mastodonRange3.5.0–3.5.9

OR

joinmastodon mastodonRange4.0.0–4.0.5

OR

joinmastodon mastodonRange4.1.0–4.1.3

Source	Link
github	www.github.com/mastodon/mastodon/releases/tag/v4.0.5
github	www.github.com/mastodon/mastodon/security/advisories/GHSA-9928-3cp5-93fm
github	www.github.com/mastodon/mastodon/commit/dc8f1fbd976ae544720a4e07120d9a91b2722440
openwall	www.openwall.com/lists/oss-security/2023/07/06/4
github	www.github.com/mastodon/mastodon/releases/tag/v4.1.3
github	www.github.com/mastodon/mastodon/releases/tag/v3.5.9

17 Jun 2026 06:06Current

9.8High risk

Vulners AI Score9.8

CVSS 3.19.9

EPSS0.37264

mastodon vulnerability file creation remote code execution denial of service