English version →
カテゴリ
CVE-2025-27399

Mastodon's domain blocks & rationales ignore user approval when visibility set as "users"

概要

Mastodon's domain blocks & rationales ignore user approval when visibility set as "users"

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Mastodon is a self-hosted, federated microblogging platform. In versions prior to 4.1.23, 4.2.16, and 4.3.4, when the visibility for domain blocks/reasons is set to "users" (localized English string: "To logged-in users"), users that are not yet approved can view the block reasons. Instance admins that do not want their domain blocks to be public are impacted. Versions 4.1.23, 4.2.16, and 4.3.4 fix the issue.

出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

影響パッケージ

Bitnami mastodon
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.3.4"}]}]

参照URL

当サイトでは、アクセス解析と広告の効果測定のために Cookie を使います。株式会社Game のサイト共通の設定です。 詳しく