Mastodon API Rate Limiting Bypass Vulnerability
CVE-2024-34535

Currently unrated

Key Information:

Vendor: Mastodon
Status: Mastodon
Vendor: CVE Published:; 3 October 2024

🔔 Create Mastodon Vulnerability Alert

What is CVE-2024-34535?

In Mastodon 4.1.6, API endpoint rate limiting can be bypassed by setting a crafted HTTP request header.

References

https://github.com/mastodon/mastodon/tags

https://github.com/mastodon/mastodon/security/advisories/...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 3, 2024
Vulnerability Reserved
May 6, 2024

.