CVE-2024-34535
03.10.2024, 18:15
In Mastodon 4.1.6, API endpoint rate limiting can be bypassed by setting a crafted HTTP request header.
Vendor | Product | Version |
---|---|---|
joinmastodon | mastodon | 𝑥 ≤ 4.1.16 |
joinmastodon | mastodon | 4.2.0 ≤ 𝑥 ≤ 4.2.8 |
𝑥
= Vulnerable software versions