Viss@mttaggart @da_667 @joshbressers the difference is authenticated vs not.
if you can exploit the thing without needing to heavylift a phishing campaign, the bar is much much lower.
then you can just spray the internet and get shells back
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.