Remote user impersonation and takeover
github.com
### Summary Due to a gap in validation of federated content in the affected Mastodon versions, attackers can craft payloads that impersonate remote federated accounts as-seen-from the affected s...
  • elvith@feddit.de
    7·
    10 months ago

    And if they don’t update it soon, you might want to reconsider your choice of instance.

    The advisory went up about 4h ago. About 3h ago, my instance admin sent out an announcement that the patch had been applied. That was before I even heard about the issue.

    Nice work :)