Remote user impersonation and takeover
github.com
### Summary Due to insufficient origin validation in all Mastodon, attackers can impersonate and take over any remote account. Every Mastodon version prior to 3.5.17 is vulnerable, as well as...

If your instance is not up to date (see footer), you can pass this along to your admins to check

  • Zak@lemmy.worldEnglish
    1·
    1 year ago

    we think any amount of detail would make it very easy to come up with an exploit

    People who would create exploits for this definitely can’t read the diffs and see what changed.