CVE-2022-24307
Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. (JSON-LD sig...
Original description
The description as published by the source.
Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. (JSON-LD signing has been supported since version 1.6.0.)
Affected packages
Bitnami
mastodon
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.3.2"},{"introduced":"3.4.0"},{"fixed":"3.4.6"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- web github.com
- web github.com