漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Mastodon vulnerable to arbitrary file creation through media attachments
Vulnerability Description
Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 3.5.0 and prior to versions 3.5.9, 4.0.5, and 4.1.3, attackers using carefully crafted media files can cause Mastodon's media processing code to create arbitrary files at any location. This allows attackers to create and overwrite any file Mastodon has access to, allowing Denial of Service and arbitrary Remote Code Execution. Versions 3.5.9, 4.0.5, and 4.1.3 contain a patch for this issue.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
Mastodon 路径遍历漏洞
Vulnerability Description
Mastodon是一款基于ActivityPub的开源社交网络服务器。 Mastodon存在路径遍历漏洞，该漏洞源于允许攻击者创建和覆盖Mastodon有权访问的任何文件，并导致拒绝服务和远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A