1228 matches found
CVE-2017-20149
creationtimestamp| type| source ---|---|--- 2022-10-15 07:29:23+00:00| exploited| https://t.me/cibsecurity/51523 2026-01-20 08:59:41+00:00| seen| https://mastodon.social/users/hrbrmstr/statuses/115926602786770030 2026-06-19 12:47:02+00:00| exploited|...
CVE-2022-31263
app/models/user.rb in Mastodon before 3.5.0 allows a bypass of e-mail restrictions...
CVE-2022-31263
app/models/user.rb in Mastodon before 3.5.0 allows a bypass of e-mail restrictions...
Design/Logic Flaw
app/models/user.rb in Mastodon before 3.5.0 allows a bypass of e-mail restrictions...
CVE-2022-31263
Summary: The CVE affects Mastodon prior to 3.5.0, specifically the file app/models/user.rb, which enables bypassing email-restriction checks. The issue is tied to the Mastodon version prior to 3.5.0 and is not described with exploit details in the provided documents. Root cause / impact: A bypass...
CVE-2022-31263
app/models/user.rb in Mastodon before 3.5.0 allows a bypass of e-mail restrictions...
CVE-2022-31263
app/models/user.rb in Mastodon before 3.5.0 allows a bypass of e-mail restrictions...
Mastodon 安全漏洞
Mastodon is an open source social networking server based on ActivityPub. A security vulnerability exists in app/models/user.rb in versions prior to Mastodon 3.5.0, which can be exploited by an attacker to bypass email restrictions...
PT-2022-20651 · Mastodon · Mastodon
Name of the Vulnerable Software and Affected Versions: Mastodon versions prior to 3.5.0 Description: The issue allows a bypass of e-mail restrictions in the app/models/user.rb file. Recommendations: For versions prior to 3.5.0, update to version 3.5.0 or later to resolve the issue...
CVE-2022-23125
creationtimestamp| type| source ---|---|--- 2022-04-29 11:51:01+00:00| seen| https://t.me/truesecator/2904 2022-05-02 12:41:07+00:00| seen| https://t.me/itsecnews/590 2023-03-28 22:39:47+00:00| seen| https://t.me/cibsecurity/60912 2025-11-06 13:51:04+00:00| seen|...
PT-2022-6498 · Mastodon · Mastodon
Name of the Vulnerable Software and Affected Versions: Mastodon versions 3.5.x through 3.5.2 Description: The issue is related to the undo mark statuses as sensitive method in app/services/approve appeal service.rb, which does not use the server's representative account. This results in moderator...
CVE-2022-24307
Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. JSON-LD signing has been supported since version 1.6.0...
CVE-2022-24307
Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. JSON-LD signing has been supported since version 1.6.0...
Design/Logic Flaw
Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. JSON-LD signing has been supported since version 1.6.0...
CVE-2022-24307
Mastodon prior to 3.3.2 and 3.4.x prior to 3.4.6 suffers from an access-control weakness due to not compacting incoming signed JSON-LD activities, despite JSON-LD signing being supported since 1.6.0. This affects versions 1.6.0–3.3.2 and 3.4.x–3.4.5, enabling potential improper access handling as...
CVE-2022-24307
Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. JSON-LD signing has been supported since version 1.6.0...
CVE-2022-24307
Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. JSON-LD signing has been supported since version 1.6.0...
PT-2022-16596 · Mastodon · Mastodon
Name of the Vulnerable Software and Affected Versions: Mastodon versions 1.6.0 through 3.3.2 Mastodon versions 3.4.x through 3.4.5 Description: The issue is related to incorrect access control due to the failure to compact incoming signed JSON-LD activities. JSON-LD signing has been supported sin...
Mastodon 安全漏洞
Mastodon is an open source social network server based on ActivityPub. Mastodon suffers from a security vulnerability that stems from incorrect access control, as it does not compress incoming signed JSON-LD activities...