Filter
Versions
4.0.0
11
4.1.0
11
1.5.7
9
1.1
7
1.2
7
1.2.1
7
1.5.8
7
0.1
6
0.10
6
0.11
6
0.2
6
0.3
6
0.7
6
0.8
6
0.9
6
1.0
6
1.2.2
6
1.5.0
6
1.5.1
6
1.5.2
6
1.5.3
6
1.5.3_rc1
6
1.5.3_rc2
6
1.5.4
6
1.5.5
6
1.5.5_rc1
6
1.5.5a
6
1.5.6
6
1.6.0
4
1.7.0
4
4.2.0
4
1.6.1
3
1.6.2
3
1.6.3
3
4.2.0-beta1
3
4.2.0-beta2
3
4.2.0-beta3
3
4.2.0-rc1
3
1
2
1.6
2
1.7.1
2
1.7.2
2
1.7.3
2
1.8.0
2
1.8.1
2
2
2
3.0
2
3.1
2
3.2
2
3.3
2
3.4
2
3.5
2
3.5.0
2
3.5.16
2
3.5.17
2
4.0
2
4.0.13
2
4.0.x
2
4.1
2
4.1.13
2
4.1.x
2
4.2
2
4.2.5
2
4.2.x
2
4.3
2
1.3
1
1.7
1
1.8.2
1
2.5.0
1
2.6.0
1
3.4.0
1
3.5.5
1
4.0.0-rc1
1
4.0.0-rc2
1
4.0.0-rc3
1
4.0.0-rc4
1
4.0.2
1
MastodonMastodon's blind LDAP injection in login allows the attacker to leak arbitrary attributes from LDAP database
7.7
First published (updated )
MastodonLack of media type verification of Activity Streams objects allows impersonation of remote accounts
8.5
EPSS
0.04%
First published (updated )
MastodonExternal OpenID Connect Account Takeover by E-Mail Change in mastodon
7.4
EPSS
0.04%
First published (updated )
MastodonDestroying OAuth Applications doesn't notify Streaming of Access Tokens being destroyed in mastodon
4.3
EPSS
0.04%
First published (updated )
Mastodon 4.1End of life
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mastodon 4.1End of life
First published (updated )
MastodonThe user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty supe…
7.5
First published (updated )
MastodonIn Mastodon 4.1.6, API endpoint rate limiting can be bypassed by setting a crafted HTTP request head…
5.9
First published (updated )
MastodonMastodon through 4.0.2 allows attackers to cause a denial of service (large Sidekiq pull queue) by c…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MastodonMastodon vulnerable to arbitrary file creation through media attachments
10
First published (updated )
MastodonMastodon vulnerable to Denial of Service through slow HTTP responses
7.5
First published (updated )
MastodonMastodon vulnerable to Cross-site Scripting through oEmbed preview cards
9.3
First published (updated )
MastodonMastodon Remote user impersonation and takeover
9.8
EPSS
0.10%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MastodonMastodon's verified profile links can be formatted in a misleading way
5.4
First published (updated )
Mastodon 4.3End of life
First published (updated )
Mastodon 4.3End of life
First published (updated )
Mastodon 4.2End of life
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mastodon 4.2End of life
First published (updated )
MastodonMastodon Invalid Domain Name Normalization vulnerability
7.5
First published (updated )
MastodonMastodon vulnerable to Stored XSS through the translation feature
6.1
First published (updated )
MastodonUnknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lis…
10
First published (updated )
MastodonUnknown vulnerability in MoinMoin 1.2.2 and earlier allows remote attackers to gain unauthorized acc…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MastodonMoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the sa…
7.5
First published (updated )
pip/moinUnspecified vulnerability in the "Show debugging information" feature in MoinMoin 1.5.7 allows remot…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.