The Bard's Lemmy
  • Communities
  • Create Post
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
Arthur Besse@lemmy.ml to Fediverse@lemmy.mlEnglish · 2 years ago

Mastodon security update: every version prior to today's is vulnerable to remote user impersonation and takeover

github.com

external-link
message-square
1
link
fedilink
  • cross-posted to:
  • fediverse@lemmy.world
  • security@lemmy.ml
147
external-link

Mastodon security update: every version prior to today's is vulnerable to remote user impersonation and takeover

github.com

Arthur Besse@lemmy.ml to Fediverse@lemmy.mlEnglish · 2 years ago
message-square
1
link
fedilink
  • cross-posted to:
  • fediverse@lemmy.world
  • security@lemmy.ml
Remote user impersonation and takeover
github.com
external-link
### Summary Due to insufficient origin validation in all Mastodon, attackers can impersonate and take over any remote account. Every Mastodon version prior to 3.5.17 is vulnerable, as well as...
alert-triangle
You must log in or # to comment.
  • (des)mosthenes@lemmy.world
    link
    fedilink
    arrow-up
    4
    arrow-down
    1
    ·
    2 years ago

    hope for the best; plan for the worst

Fediverse@lemmy.ml

fediverse@lemmy.ml

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !fediverse@lemmy.ml

A community dedicated to fediverse news and discussion.

Fediverse is a portmanteau of “federation” and “universe”.

Getting started on Fediverse;

  • What is the fediverse?
    • Short ver.
    • Full ver.
  • Fediverse Platforms
  • How to run your own community
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 28 users / day
  • 66 users / week
  • 221 users / month
  • 739 users / 6 months
  • 2 local subscribers
  • 23.9K subscribers
  • 773 Posts
  • 4.05K Comments
  • Modlog
  • mods:
  • Sean Tilley@lemmy.ml
  • wakest@lemmy.ml
  • BE: 0.19.14
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org