According to its self-reported version number, the Mastodon application running on the remote host is prior to 3.5.18 or 4.0.x prior to 4.0.14 or 4.1.x prior to 4.1.14 or 4.2.x prior to 4.2.6. It is, therefore, affected by multiples vulnerabilities :

- Destroying OAuth Applications doesn't notify Streaming of Access Tokens being destroyed - External OpenID Connect Account Takeover by E-Mail Change

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
114483	Mastodon < 3.5.18 Multiples Vulnerabilities	Web App Scanning	Component Vulnerability	11/5/2024	11/5/2024	medium
114484	Mastodon 4.0.x < 4.0.14 Multiples Vulnerabilities	Web App Scanning	Component Vulnerability	11/5/2024	11/5/2024	medium
114485	Mastodon 4.1.x < 4.1.14 Multiples Vulnerabilities	Web App Scanning	Component Vulnerability	11/5/2024	11/5/2024	medium
114486	Mastodon 4.2.x < 4.2.6 Multiples Vulnerabilities	Web App Scanning	Component Vulnerability	11/5/2024	11/5/2024	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium