Mastodon Vulnerability Allows Hackers to Hijack Any Decentralized Account

The decentralized social network Mastodon has disclosed a critical security flaw that enables malicious actors to impersonate and take over any account. "Due to insufficient origin validation in all Mastodon, attackers can impersonate and take over any remote account," the maintainers said in a...

CVE-2024-23832

creationtimestamp| type| source ---|---|--- 2024-02-01 18:21:47+00:00| seen| https://t.me/ctinow/177719 2024-02-03 07:58:30+00:00| seen| https://t.me/thehackernews/4499 2024-02-03 08:15:32+00:00| seen| Telegram/9-lwg2GVev4VBQlgwZfMKGEJLaHd199Vz40pQQqSeH9dEw 2024-02-03 08:37:54+00:00| seen|...

CVE-2024-23832 Mastodon Remote user impersonation and takeover

Mastodon is a free, open-source social network server based on ActivityPub Mastodon allows configuration of LDAP for authentication. Due to insufficient origin validation in all Mastodon, attackers can impersonate and take over any remote account. Every Mastodon version prior to 3.5.17 is...