medium5.9
CVE-2024-34535
In Mastodon 4.1.6, API endpoint rate limiting can be bypassed by setting a crafted HTTP request header.
Impact
In Mastodon 4.1.6, API endpoint rate limiting can be bypassed by setting a crafted HTTP request header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joinmastodon | Mastodon | through 4.1.16 from 4.2.0 through 4.2.8 |