Security Advisory

CVE-2025-27399

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-02-27 17:15:05

Last updated 2025-02-27 17:59:31

Assigner GitHub_M

State PUBLISHED

Description

Mastodon is a self-hosted, federated microblogging platform. In versions prior to 4.1.23, 4.2.16, and 4.3.4, when the visibility for domain blocks/reasons is set to "users" (localized English string: "To logged-in users"), users that are not yet approved can view the block reasons. Instance admins that do not want their domain blocks to be public are impacted. Versions 4.1.23, 4.2.16, and 4.3.4 fix the issue.

← Browse all CVEs View on cve.org ↗