Feddit
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
ruffsl@programming.dev to Programming@programming.devEnglish · 2 years ago

TootRoot | Mastodon had a Critical Security Vulnerability

youtube.com

external-link
message-square
1
link
fedilink
  • cross-posted to:
  • fediverse@lemmy.world
13
external-link

TootRoot | Mastodon had a Critical Security Vulnerability

youtube.com

ruffsl@programming.dev to Programming@programming.devEnglish · 2 years ago
message-square
1
link
fedilink
  • cross-posted to:
  • fediverse@lemmy.world
Mastodon had a Critical Security Vulnerability
youtube.com
external-link
In this video I discuss the recent security updates to Mastodon to fix critical security vulnerabilities that allowed for cross site scripting through oEmbed...

cross-posted from: https://programming.dev/post/551085

Security advisorys: https://github.com/mastodon/mastodon/security

alert-triangle
You must log in or register to comment.
  • ruffsl@programming.devOP
    link
    fedilink
    English
    arrow-up
    4
    ·
    2 years ago

    For anybody wondering what the Mastodon security issue is - CVE-2023-36460, you can send a toot which makes a webshell on instances that process said toot. #CVE202336460 #TootRoot

    • https://cyberplace.social/@GossiTheDog/110667416012211236

Programming@programming.dev

programming@programming.dev

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !programming@programming.dev

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person’s post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you’re posting long videos try to add in some form of tldr for those who don’t want to watch videos

Wormhole

Follow the wormhole through a path of communities !webdev@programming.dev



Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 603 users / day
  • 1.38K users / week
  • 3.03K users / month
  • 7.75K users / 6 months
  • 7 local subscribers
  • 21.8K subscribers
  • 2.33K Posts
  • 36.7K Comments
  • Modlog
  • mods:
  • snowe@programming.dev
  • Ategon@programming.dev
  • MaungaHikoi@lemmy.nz
  • UlrikHD@programming.dev
  • BE: 0.19.11
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org