Live data from Hacker News

CVE-2024-23832 Mastodon Vulnerability: Remote user impersonation and takeover

Post reply on HN

Print view View original

1–4 of 4 posts

CVE-2024-23832 Mastodon Vulnerability: Remote user impersonation and takeover

#1

Post by niel » Thu, Feb 01, 2024, 4:11 PM UTC

CVE-2024-23832 Mastodon Vulnerability: Remote user impersonation and takeover
github.com

Re: CVE-2024-23832 Mastodon Vulnerability: Remote user impersonation and takeover

#2

Post by niel » Thu, Feb 01, 2024, 4:13 PM UTC

Fixed in Mastodon v4.2.5 https://github.com/mastodon/mastodon/releases/tag/v4.2.5

Re: CVE-2024-23832 Mastodon Vulnerability: Remote user impersonation and takeover

#3

Post by M2Ys4U » Thu, Feb 01, 2024, 4:49 PM UTC

niel wrote: post #2

Fixed in Mastodon v4.2.5 https://github.com/mastodon/mastodon/releases/tag/v4.2.5

Also 4.1.13, 4.0.13, and 3.5.17 (despite the fact the latter two branches are end-of-life)

Re: CVE-2024-23832 Mastodon Vulnerability: Remote user impersonation and takeover

#4

Post by Kye » Thu, Feb 01, 2024, 11:01 PM UTC

glitch-soc also has a patch available for it.

Post reply on HN