CVE-2023-42451 Mastodon Invalid Domain Name Normalization vulnerability

Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 3.5.14, 4.0.10, 4.1.8, and 4.2.0-rc2, under certain circumstances, attackers can exploit a flaw in domain name normalization to spoof domains they do not own. Versions 3.5.14, 4.0.10, 4.1.8, and 4.2.0-rc...

CVE-2023-42451

CVE-2023-42451 affects Mastodon: prior to versions 3.5.14, 4.0.10, 4.1.8, and 4.2.0-rc2, there is a flaw in domain name normalization that can allow attackers to spoof domains they do not own under certain circumstances. A patch exists in versions 3.5.14, 4.0.10, 4.1.8, and 4.2.0-rc2. The root ca...