漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Mastodon's verified profile links can be formatted in a misleading way
Vulnerability Description
Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 2.6.0 and prior to versions 3.5.9, 4.0.5, and 4.1.3, an attacker can craft a verified profile link using specific formatting to conceal arbitrary parts of the link, enabling it to appear to link to a different URL altogether. The link is visually misleading, but clicking on it will reveal the actual link. This can still be used for phishing, though, similar to IDN homograph attacks. Versions 3.5.9, 4.0.5, and 4.1.3 contain a patch for this issue.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Vulnerability Type
输入验证不恰当
Vulnerability Title
Mastodon 输入验证错误漏洞
Vulnerability Description
Mastodon是一款基于ActivityPub的开源社交网络服务器。 Mastodon存在输入验证错误漏洞，该漏洞源于允许攻击者创建配置文件链接以隐藏链接的任意部分，并用于网络钓鱼。
CVSS Information
N/A
Vulnerability Type
N/A