← All advisories

Medium severity5.9NVD Advisory· Published Oct 3, 2024· Updated Jun 17, 2026

CVE-2024-34535

CVE-2024-34535

Description

In Mastodon 4.1.6, API endpoint rate limiting can be bypassed by setting a crafted HTTP request header.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Mastodon/Mastodon3 versions
cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*range: <=4.1.16
- (no CPE)
- (no CPE)range: = 4.1.6
osv-coords
pkg:bitnami/mastodon
Range: < 4.2.9

Patches

Vulnerability mechanics

References

2

github.com/mastodon/mastodon/security/advisories/GHSA-q3rg-xx5v-4mxhnvdThird Party Advisory
github.com/mastodon/mastodon/tagsnvdRelease Notes

News mentions

0

No linked articles in our index yet.