CVE-2024-13913

creationtimestamp| type| source ---|---|--- 2025-03-14 05:46:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7530 2025-03-14 07:48:35+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114159682393652236 2025-03-14 08:20:44+00:00| seen| https://t.me/cvedetector/20265...

BIT-MASTODON-2023-42451 Mastodon Invalid Domain Name Normalization vulnerability

Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 3.5.14, 4.0.10, 4.1.8, and 4.2.0, under certain circumstances, attackers can exploit a flaw in domain name normalization to spoof domains they do not own. Versions 3.5.14, 4.0.10, 4.1.8, and 4.2.0 contai...