Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x7fq-6476-543v

Опубликовано: 10 фев. 2022
Источник: github
Github: Не прошло ревью

Описание

Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. (JSON-LD signing has been supported since version 1.6.0.)

Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. (JSON-LD signing has been supported since version 1.6.0.)

EPSS

Процентиль: 58%
0.00367
Низкий

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 9.8
nvd
около 4 лет назад

Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. (JSON-LD signing has been supported since version 1.6.0.)

CVSS3: 9.8
debian
около 4 лет назад

Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access cont ...

EPSS

Процентиль: 58%
0.00367
Низкий

Дефекты

CWE-863