CVE-2018-21018: Critical severity mastodon vulnerability
Published Sep 22, 2019
·Updated
Mastodon before 2.6.3 mishandles timeouts of incompletely established sessions.
Affected Software
1 affected component
Joinmastodon Mastodon<2.6.3
Remediation
Patch Available
Patch Available
Event History
Sep 22, 2019
CVE Published
via MITRE·02:22 PM
Data Sourced
via MITRE·02:22 PM
Description
Frequently Asked Questions
1
What is CVE-2018-21018?
CVE-2018-21018 is a vulnerability in Mastodon version 2.6.2 and earlier that mishandles timeouts of incompletely established sessions.
2
What is the severity of CVE-2018-21018?
CVE-2018-21018 has a severity score of 9.8 out of 10.
3
How does CVE-2018-21018 affect Mastodon?
CVE-2018-21018 affects Mastodon versions up to 2.6.2.
4
How can I fix CVE-2018-21018?
To fix CVE-2018-21018, upgrade to Mastodon version 2.6.3 or later.
5
Where can I find more information about CVE-2018-21018?
You can find more information about CVE-2018-21018 on the GitHub pull requests and release page for Mastodon.