← All advisories

Medium severity5.3NVD Advisory· Published May 24, 2022· Updated Jun 17, 2026

CVE-2022-31263

CVE-2022-31263

Description

app/models/user.rb in Mastodon before 3.5.0 allows a bypass of e-mail restrictions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Mastodon/Mastodon3 versions
cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*range: <3.5.0
- (no CPE)
- (no CPE)range: <3.5.0
osv-coords
pkg:bitnami/mastodon
Range: < 3.5.0

Patches

Vulnerability mechanics

References

2

github.com/mastodon/mastodon/pull/17909nvdPatchThird Party Advisory
github.com/mastodon/mastodon/releases/tag/v3.5.0nvdRelease NotesThird Party Advisory

News mentions

0

No linked articles in our index yet.