Headline
CVE-2022-46405: Context - HackMD
Mastodon through 4.0.2 allows attackers to cause a denial of service (large Sidekiq pull queue) by creating bot accounts that follow attacker-controlled accounts on certain other servers associated with a wildcard DNS A record, such that there is uncontrolled recursion of attacker-generated messages.
HackMD
- Create new note
- Create a note from template
Sharing
View mode
- Edit mode
- View mode
- Book mode
- Slide mode
Note Permission
Read
- Only me
- Signed-in users
- Everyone
Write
- Only me
- Signed-in users
- Everyone
More (Comment, Invitee)
- Options
- Versions and GitHub Sync
- Transfer ownership
- Delete this note
- Template
- Save as template
- Insert from template
- Export
- Dropbox
- Google Drive
- Gist
- Import
- Dropbox
- Google Drive
- Gist
- Clipboard
- Download
- Markdown
- HTML
- Raw HTML