CVE-2024-34535
03.10.2024, 18:15
In Mastodon 4.1.6, API endpoint rate limiting can be bypassed by setting a crafted HTTP request header.
| Vendor | Product | Version |
|---|---|---|
| joinmastodon | mastodon | 𝑥 ≤ 4.1.16 |
| joinmastodon | mastodon | 4.2.0 ≤ 𝑥 ≤ 4.2.8 |
𝑥
= Vulnerable software versions