CVE-2022-0432: Prototype Pollution in mastodon/mastodon

Q: What is CVE-2022-0432?

CVE-2022-0432 is a vulnerability related to Prototype Pollution in the GitHub repository mastodon/mastodon prior to version 3.5.0.

Q: How severe is CVE-2022-0432?

CVE-2022-0432 has a severity score of 6.1, indicating a high severity.

Q: How does CVE-2022-0432 affect Joinmastodon Mastodon?

CVE-2022-0432 affects Joinmastodon Mastodon versions prior to 3.5.0 and allows for potential Prototype Pollution vulnerabilities.

Q: How can I fix CVE-2022-0432?

To fix CVE-2022-0432, it is recommended to update Joinmastodon Mastodon to version 3.5.0 or later.

Q: Where can I find more information about CVE-2022-0432?

More information about CVE-2022-0432 can be found in the references provided: [GitHub commit](https://github.com/mastodon/mastodon/commit/4d6d4b43c6186a13e67b92eaf70fe1b70ea24a09) and [Huntr bounty](https://huntr.dev/bounties/d06da292-7716-4d74-a129-dd04773398d7).

Published Feb 2, 2022

Updated

Prototype Pollution in GitHub repository mastodon/mastodon prior to 3.5.0.

Affected Software

1 affected component

Joinmastodon Mastodon<3.5.0

Remediation

Patch Available

https://github.com/mastodon/mastodon/commit/4d6d4b43c6186a13e67b92eaf70fe1b70ea24a09

Event History

Feb 2, 2022

CVE Published

via MITRE·08:11 PM

Data Sourced

via MITRE·08:11 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2022-0432?

CVE-2022-0432 is a vulnerability related to Prototype Pollution in the GitHub repository mastodon/mastodon prior to version 3.5.0.

How severe is CVE-2022-0432?

CVE-2022-0432 has a severity score of 6.1, indicating a high severity.

How does CVE-2022-0432 affect Joinmastodon Mastodon?