Follow
Mastodon vulnerable to multiple system configuration problems.
'The vulnerability also meant it was possible to download files from the server – including those shared by direct message (DMs on Mastodon, unlike Twitter, omit encryption). Destructive attacks, including the deletion of files on the server, were also possible.'
Sauce: https://portswigger.net/daily-swig/mastodon-vulnerable-to-multiple-system-configuration-problems