Five security vulnerabilities have been patched by decentralized social networking platform Mastodon as part of a security update, according to The Hacker News. Threat actors could leverage the most severe flaw, tracked as CVE-2023-36460, to use the platform’s media attachments for file creation and overwriting to later facilitate denial-of-service and arbitrary remote code execution attacks.
Source: SC Magazine