Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8f7g-vmw6-89m7

Опубликовано: 04 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Mastodon through 4.0.2 allows attackers to cause a denial of service (large Sidekiq pull queue) by creating bot accounts that follow attacker-controlled accounts on certain other servers associated with a wildcard DNS A record, such that there is uncontrolled recursion of attacker-generated messages.

Mastodon through 4.0.2 allows attackers to cause a denial of service (large Sidekiq pull queue) by creating bot accounts that follow attacker-controlled accounts on certain other servers associated with a wildcard DNS A record, such that there is uncontrolled recursion of attacker-generated messages.

EPSS

Процентиль: 72%
0.00722
Низкий

7.5 High

CVSS3

Дефекты

CWE-674

Связанные уязвимости

CVSS3: 7.5
nvd
около 3 лет назад

Mastodon through 4.0.2 allows attackers to cause a denial of service (large Sidekiq pull queue) by creating bot accounts that follow attacker-controlled accounts on certain other servers associated with a wildcard DNS A record, such that there is uncontrolled recursion of attacker-generated messages.

CVSS3: 7.5
debian
около 3 лет назад

Mastodon through 4.0.2 allows attackers to cause a denial of service ( ...

EPSS

Процентиль: 72%
0.00722
Низкий

7.5 High

CVSS3

Дефекты

CWE-674