CVE-2022-0432highCWE-1321

CVE-2022-0432: high-severity vulnerability in mastodon/mastodon

Prototype Pollution in mastodon/mastodon

Published · Updated

Follow this CVE+ Monitor mastodon/mastodon

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

36Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendcvss 7.4epss 4.4%
Prototype Pollution in GitHub repository mastodon/mastodon prior to 3.5.0.
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Affected products
mastodon · mastodon/mastodon
Related CVEs — mastodon/mastodon

In the same product, most dangerous first.

CVE-2022-2166CRITICALImproper Restriction of Excessive Authentication Attempts in mastodon/mastodonEPSS 1.1%