josh on Nostr: damn this doesn't sound good "Due to insufficient origin validation in all Mastodon, ...
Published at
2024-02-01 21:59:39Event JSON
{
"id": "7da682f4a37b0b1639f5ec9d66abc387b5af1bbe44881a2834b2f4187b23e5ca",
"pubkey": "5180cd1570f39dda6829d4cb34681e3450c0232b929e92566b125de618758c8f",
"created_at": 1706824779,
"kind": 1,
"tags": [
[
"proxy",
"https://phocks.eu.org/users/josh/statuses/111858468750343676",
"activitypub"
]
],
"content": "damn this doesn't sound good \"Due to insufficient origin validation in all Mastodon, attackers can impersonate and take over any remote account.\" every instance admin should probably update now https://github.com/mastodon/mastodon/security/advisories/GHSA-3fjr-858r-92rw",
"sig": "20ce1ec2b39d24e1c7f6900d70b28e11f5211e31bc0bc0a5f7e446ec27d1aacd6c824bbd04fb64fd525cf81761ec380e0777162909057d7a24d1a000b44b1572"
}
