CVE-2022-24307
Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. (JSON-LD sig...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. (JSON-LD signing has been supported since version 1.6.0.)
Paquets affectés
Bitnami
mastodon
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.3.2"},{"introduced":"3.4.0"},{"fixed":"3.4.6"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- web github.com
- web github.com