PT-2023-8743 · Mastodon · Mastodon

Cure53 · Published 2023-07-06 · Updated 2024-03-06 · CVE-2023-36460

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mastodon versions 3.5.0 through 3.5.8 Mastodon versions 4.0.0 through 4.0.4 Mastodon versions 4.1.0 through 4.1.2

Description The issue arises from a flaw in the media processing code, allowing attackers to create arbitrary files at any location using carefully crafted media files. This can lead to Denial of Service and arbitrary Remote Code Execution. The vulnerability is caused by an error in input validation when handling directory traversal sequences.

Recommendations For Mastodon versions 3.5.0 through 3.5.8, update to version 3.5.9 or later. For Mastodon versions 4.0.0 through 4.0.4, update to version 4.0.5 or later. For Mastodon versions 4.1.0 through 4.1.2, update to version 4.1.3 or later. As a temporary workaround, consider restricting access to the media processing code until a patch is applied. Avoid using the media file handler component until the issue is resolved.

Exploit

Fix

RCE

DoS

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2024-01776

BIT-MASTODON-2023-36460

CVE-2023-36460

GHSA-9928-3CP5-93FM

Affected Products

Mastodon

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36460.json · Exploit
• https://github.com/mastodon/mastodon/commit/dc8f1fbd976ae544720a4e07120d9a91b2722440 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-36460 · Security Note
• https://bdu.fstec.ru/vul/2024-01776 · Security Note
• https://osv.dev/vulnerability/CVE-2023-36460 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mastodon-2023-36460 · Vendor Advisory
• https://github.com/mastodon/mastodon/security/advisories/GHSA-9928-3cp5-93fm · Note
• https://github.com/mastodon/mastodon/releases/tag/v4.0.5 · Note
• https://github.com/mastodon/mastodon/releases/tag/v3.5.9 · Note
• https://github.com/mastodon/mastodon/releases/tag/v4.1.3 · Note
• https://t.me/true_secator/4597 · Telegram Post
• https://openwall.com/lists/oss-security/2023/07/06/4 · Note
• https://t.me/purple_medved/70 · Telegram Post
• https://t.me/echeloneyes/1725 · Telegram Post
• https://vuldb.com/?id.233261 · Note