CVE-2025-67500
Low · 3.7CVSS
3.7
EPSS
0.2%
Published
Dec 9, 2025
CISA due date
—
The record
Mastodon Error Handling Discrepancy Enables Private Status Existence Enumeration
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Bitnami | mastodon | 0 | 4.2.28 |
Related vulnerabilities
- CVE-2026-25540 Mastodon is a free, open-source social network server based on ActivityPub. Also affects mastodon
- CVE-2026-23964 Mastodon is a free, open-source social network server based on ActivityPub. Also affects mastodon
- CVE-2026-23962 Mastodon is a free, open-source social network server based on ActivityPub. Also affects mastodon
- CVE-2026-23963 Mastodon is a free, open-source social network server based on ActivityPub. Also affects mastodon
- CVE-2026-23961 Mastodon is a free, open-source social network server based on ActivityPub. Also affects mastodon
- CVE-2026-89173 Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive… CWE-204
- CVE-2026-9161 Observable response discrepancy vulnerability in DernekPlus Website Template allows… CWE-204
- CVE-2026-19205 Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows… CWE-204