CVE-2025-27399

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Feb 27, 2025
CWE ID 285
CWE ID 200

Summary

CVE-2025-27399 affects Mastodon, a self-hosted microblogging platform. In previous versions, specifically 4.1.23, 4.2.16, and 4.3.4, users who are not yet approved can view domain block reasons when the visibility is set to "users." This issue poses a risk for instance admins who prefer to keep their domain blocks private. The vulnerability has been mitigated in versions 4.1.23, 4.2.16, and 4.3.4.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share