CVE-2018-21018

Published September 22nd, 2019

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

1

PROJECT

Description

Mastodon before 2.6.3 mishandles timeouts of incompletely established sessions.

mastodon/mastodon

Your self-hosted, globally interconnected microblogging community

GitHub

50.1K