223 - Usurping Mastodon and Broken Signature Schemes [Bug Bounty Podcast]

Just a few issues this week, a Mastodon normalization issue leading to the potential to impersonate another account. Then we have a more complex chain starting again with a normalization leading to a fairly interesting request smuggling (CL.0 via malformed content-type header) and cache poisoning to leak credentials. Finally a crypto issue with a signature not actually being a signature.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/223.html

[00:00:00] Introduction
[00:00:23] Usurping Mastodon instances - mastodon.so/cial [CVE-2023-42451] …

account bounty bug bug bounty cache cache poisoning credentials header issue leak malformed mastodon normalization podcast poisoning request request smuggling signature smuggling week