https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 21:35:42 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-07396 bdu:2023-07396 https://cve.radiocsirt.org/vuln/bdu:2023-07396 https://cve.radiocsirt.org/vuln/euvd-2026-245069 EUVD-2026-245069 https://cve.radiocsirt.org/vuln/euvd-2026-245069 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42450 <p>Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 4.2.0-beta1 and prior to version 4.2.0-rc2, by crafting specific input, attackers can inject arbitrary data into HTTP requests issued by Mastodon. This can be used to perform confused deputy attacks if the server configuration includes `ALLOWED_PRIVATE_ADDRESSES` to allow access to local exploitable services. Version 4.2.0-rc2 has a patch for the issue.</p> <p>Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 4.2.0-beta1 and prior to version 4.2.0-rc2, by crafting specific input, attackers can inject arbitrary data into HTTP requests issued by Mastodon. This can be used to perform confused deputy attacks if the server configuration includes `ALLOWED_PRIVATE_ADDRESSES` to allow access to local exploitable services. Version 4.2.0-rc2 has a patch for the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-42450 https://cve.radiocsirt.org/vuln/gsd-2023-42450 gsd-2023-42450 https://cve.radiocsirt.org/vuln/gsd-2023-42450