Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://were.social/objects/b6819e03-38a0-4fd9-bc3f-909470215c8c">arcanicanis (arcanicanis@were.social)'s status on Friday, 16-Feb-2024 07:15:54 JST</a><a href="https://were.social/users/arcanicanis" title="arcanicanis@were.social"><img src="https://gnusocial.jp/avatar/10459-48-20220918060352.webp" width="48" height="48" alt="arcanicanis" style="position: absolute; left: 0; top: 0;">arcanicanis</a><div><a href="https://were.social/objects/590466f4-de25-44fd-bdcd-21e3f1988a7d" rel="in-reply-to">in reply to</a><ul><li><li><a href="https://gnusocial.jp/user/10459" title="arcanicanis@were.social">arcanicanis</a></li><li><a href="https://gnusocial.jp/user/232120" title="dan_ramos@noauthority.social">Dan Ramos 🇵🇹🇺🇸  :verified:</a></li></ul></div></section><article>Here's the 'more info':<br><br><a href="https://were.social/notice/AeuTOL78x560sfdeFc">https://were.social/notice/AeuTOL78x560sfdeFc</a><br><br><a href="https://arcanican.is/excerpts/cve-2024-23832/">https://arcanican.is/excerpts/cve-2024-23832/</a><br><br><a href="https://arcanican.is/excerpts/cve-2024-23832/discovery.htm">https://arcanican.is/excerpts/cve-2024-23832/discovery.htm</a></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/2673946#notice-5398537">In conversation</a><time datetime="2024-02-16T07:15:54+09:00" title="Friday, 16-Feb-2024 07:15:54 JST">about 9 months ago</time> <span>from <span><a href="https://were.social/objects/b6819e03-38a0-4fd9-bc3f-909470215c8c" rel="external" title="Sent from were.social via ActivityPub">were.social</a></span></span><a href="https://were.social/objects/b6819e03-38a0-4fd9-bc3f-909470215c8c">permalink</a><h4>Attachments</h4><ol><li><article><header><div>No result found on File_thumbnail lookup.</div><h5><a href="https://arcanican.is/excerpts/cve-2024-23832/discovery.htm">Remote User Impersonation and Takeover via Cache Poisoning</a></h5><div></div></header><div></div><footer></footer></article></li><li><article><header><div>Domain not in remote thumbnail source whitelist: were.social</div><h5><a href="https://were.social/notice/AeuTOL78x560sfdeFc">arcanicanis (@arcanicanis@were.social)</a></h5><div></div></header><div>So here’s an example of one of the maliciously-crafted payloads that resulted in a 9.8 severity CVE (CVE-2024-23832) against Mastodon:{
  "@context": ["https://www.w3.org/ns/activitystreams"],
  "i...</div><footer></footer></article></li><li><article><header><div>Domain not in remote thumbnail source whitelist: arcanican.is</div><h5><a href="https://arcanican.is/excerpts/cve-2024-23832/">Remote User Impersonation and Takeover via Cache Poisoning</a></h5><div></div></header><div></div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
arcanicanis (arcanicanis@were.social)'s status on Friday, 16-Feb-2024 07:15:54 JSTarcanicanis
in reply to
Here's the 'more info':

https://were.social/notice/AeuTOL78x560sfdeFc

https://arcanican.is/excerpts/cve-2024-23832/

https://arcanican.is/excerpts/cve-2024-23832/discovery.htm
In conversationabout 9 months ago from were.socialpermalink
Attachments
1. No result found on File_thumbnail lookup.
  Remote User Impersonation and Takeover via Cache Poisoning
2. Domain not in remote thumbnail source whitelist: were.social
  arcanicanis (@arcanicanis@were.social)
  So here’s an example of one of the maliciously-crafted payloads that resulted in a 9.8 severity CVE (CVE-2024-23832) against Mastodon:{ "@context": ["https://www.w3.org/ns/activitystreams"], "i...
3. Domain not in remote thumbnail source whitelist: arcanican.is
  Remote User Impersonation and Takeover via Cache Poisoning

Public

Embed Notice

HTML Code

Corresponding Notice