BREAKING: Mastodon :D

https://github.com/mastodon/mastodon/security/advisories/GHSA-3fjr-858r-92rw

Reply to this note

Please Login to reply.

Discussion

Due to insufficient origin validation in all Mastodon, attackers can impersonate and take over ANY remote account.

Scary, right?

Yes, but have never used mastodon

I tried it for a few days but didn't like the experience.