Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2025-27399

Опубликовано: 27 фев. 2025
Источник: debian
EPSS Низкий

Описание

Mastodon is a self-hosted, federated microblogging platform. In versions prior to 4.1.23, 4.2.16, and 4.3.4, when the visibility for domain blocks/reasons is set to "users" (localized English string: "To logged-in users"), users that are not yet approved can view the block reasons. Instance admins that do not want their domain blocks to be public are impacted. Versions 4.1.23, 4.2.16, and 4.3.4 fix the issue.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
mastodonitppackage

EPSS

Процентиль: 28%
0.0035
Низкий

Связанные уязвимости

CVSS3: 5.3
nvd
больше 1 года назад

Mastodon is a self-hosted, federated microblogging platform. In versions prior to 4.1.23, 4.2.16, and 4.3.4, when the visibility for domain blocks/reasons is set to "users" (localized English string: "To logged-in users"), users that are not yet approved can view the block reasons. Instance admins that do not want their domain blocks to be public are impacted. Versions 4.1.23, 4.2.16, and 4.3.4 fix the issue.

EPSS

Процентиль: 28%
0.0035
Низкий