CVE-2023-36462

Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 2.6.0 and prior to versions 3.5.9, 4.0.5, and 4.1.3, an attacker can craft a verified profile link using specific formatting to conceal arbitrary parts of the link, enabling it to appear to link to a...

CVE-2023-36462

Summary of CVE-2023-36462 (Mastodon) : A vulnerability in Mastodon (ActivityPub) allows an attacker to craft a verified profile link with specific formatting that conceals parts of the URL, making it appear to link to a different destination. The issue is visually misleading, and clicking reveals...