Y’all may be wondering why I feel so strongly about Linux and FOSS. I’ve thought about it. You know how Mastodon is now a very accessible, for the blind, social network? It wasn’t always like that. But over the years, the open API has meant that blind people have made their own Mastodon clients, like Tweesecake and TWBlue. Sighted people have made their Mastodon clients accessible, like Mona and Tusky. I see so many pictures on Mastodon that has descriptions that I have to remind myself that an actual person spent time out of their day to craft a description for us. And I think to myself, “What if that could happen to Linux?”

#accessibility #foss #linux #blind

—@devinprater

Responsible disclosure of unpatched vulnerability CVE-2023-1430 in FluentCRM by WPManageNinja (with mitigation patch): https://github.com/karlemilnikka/CVE-2023-1430.

tl;dr Attackers can view and edit contact details in FluentCRM. WPManageNinja hasn’t patched the vulnerability within the 90-day responsible disclosure time window. I provide a mitigation snippet to prevent vulnerability exploitation while waiting for an official patch.

#wordpress #wpmanageninja #fluentcrm #cve20231430

—@karlemilnikka