CVE-2024-25619
CVSS 3.1 Score 3.1 of 10 (low)
Details
Summary
CVE-2024-25619 is a vulnerability that affects Mastodon, a free and open-source social network server based on ActivityPub. The issue arises when an OAuth Application is destroyed, as the streaming server is not informed that the Access Tokens associated with the application have also been destroyed. This poses a security risk as it allows an application to continue listening to streaming even after it has been destroyed. To mitigate this vulnerability, a `before_destroy` callback needs to be added to `ApplicationExtension` in order to notify streaming that all the Application's Access Tokens are being terminated. The impact of this vulnerability is considered negligible, as the affected application needs to be owned by the user. However, it has been addressed in subsequent versions of Mastodon.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions