CVE-2023-49952

Source
https://nvd.nist.gov/vuln/detail/CVE-2023-49952
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-49952.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-49952
Aliases
  • GHSA-c2r5-cfqr-c553
Published
2024-11-18T18:15:05Z
Modified
2024-11-19T23:02:18.724882Z
Summary
[none]
Details

Mastodon 4.1.x before 4.1.17 and 4.2.x before 4.2.9 allows a bypass of rate limiting via a crafted HTTP request header.

References

Affected packages

Git / github.com/mastodon/mastodon

Affected ranges

Type
GIT
Repo
https://github.com/mastodon/mastodon
Events

Affected versions

v4.*

v4.2.0
v4.2.1
v4.2.2
v4.2.3
v4.2.4
v4.2.5
v4.2.6
v4.2.7
v4.2.8