Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://makai.chaotic.ninja/notes/9p6zapk5oq">Pawlicker (pawlicker@makai.chaotic.ninja)'s status on Friday, 02-Feb-2024 01:15:07 JST</a><a href="https://makai.chaotic.ninja/@Pawlicker" title="pawlicker@makai.chaotic.ninja"><img src="https://gnusocial.jp/theme/gnusocialjp/default-avatar-stream.png" width="48" height="48" alt="Pawlicker" style="position: absolute; left: 0; top: 0;">Pawlicker</a></section><article><p>PSA: update your mastodon install now<br><a href="https://github.com/mastodon/mastodon/security/advisories/GHSA-3fjr-858r-92rw">https://github.com/mastodon/mastodon/security/advisories/GHSA-3fjr-858r-92rw</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/2664624#notice-5280284">In conversation</a><time datetime="2024-02-02T01:15:07+09:00" title="Friday, 02-Feb-2024 01:15:07 JST">about 10 months ago</time> <span>from <span><a href="https://makai.chaotic.ninja/notes/9p6zapk5oq" rel="external" title="Sent from makai.chaotic.ninja via ActivityPub">makai.chaotic.ninja</a></span></span><a href="https://makai.chaotic.ninja/notes/9p6zapk5oq">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: opengraph.githubassets.com</div><h5><a href="https://github.com/mastodon/mastodon/security/advisories/GHSA-3fjr-858r-92rw">Remote user impersonation and takeover</a></h5><div></div></header><div>### SummaryDue to insufficient origin validation in all Mastodon, attackers can impersonate and take over any remote account.Every Mastodon version prior to 3.5.17 is vulnerable, as well as...</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Pawlicker (pawlicker@makai.chaotic.ninja)'s status on Friday, 02-Feb-2024 01:15:07 JST Pawlicker
PSA: update your mastodon install now
https://github.com/mastodon/mastodon/security/advisories/GHSA-3fjr-858r-92rw
In conversationabout 10 months ago from makai.chaotic.ninjapermalink
Attachments
1. Domain not in remote thumbnail source whitelist: opengraph.githubassets.com
  Remote user impersonation and takeover
  ### Summary Due to insufficient origin validation in all Mastodon, attackers can impersonate and take over any remote account. Every Mastodon version prior to 3.5.17 is vulnerable, as well as...

Public

Embed Notice

HTML Code

Corresponding Notice