CVE-2018-21018

Mastodon before 2.6.3 mishandles timeouts of incompletely established sessions.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-09-22

Last modified

2024-08-05

Weaknesses

CWE-613

Affected products

• Mastodon (Joinmastodon)

References

• https://github.com/tootsuite/mastodon/pull/9329
• https://github.com/tootsuite/mastodon/pull/9381
• https://github.com/tootsuite/mastodon/releases/tag/v2.6.2
• https://github.com/tootsuite/mastodon/releases/tag/v2.6.3