PT-2026-28542 · Mastodon · Mastodon

Clearlyclaire · Publicado 2026-03-27 · Atualizado 2026-03-31 · CVE-2026-33869

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Mastodon versions 4.5.0 through 4.5.7 Mastodon versions 4.4.0 through 4.4.14

Description Mastodon is a free, open-source social network server based on ActivityPub. An attacker who is aware of a quote before it has reached a server can prevent the quote from being correctly processed on that server. This issue affects versions 4.5.x prior to 4.5.8 and 4.4.x prior to 4.4.15. Versions 4.3 and earlier are not affected as they do not support quotes.

Recommendations Update Mastodon to version 4.5.8 or later. Update Mastodon to version 4.4.15 or later.

Exploit

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

BIT-MASTODON-2026-33869

CVE-2026-33869

GHSA-Q4G8-82C5-9H33

Produtos afetados

Mastodon

Referências · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33869.json · Exploit
• https://github.com/mastodon/mastodon/security/advisories/GHSA-q4g8-82c5-9h33 · Aviso do Fabricante
• https://osv.dev/vulnerability/BIT-mastodon-2026-33869 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2026-33869 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2037719409259884820 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-33869 · Nota de Segurança