UpHeron
All vulnerabilities

Servers and applications

CVE-2024-23832

Mastodon is a free, open-source social network server based on ActivityPub Mastodon allows configuration of LDAP for authentication. Due to insufficient origin validation in all Mastodon, attackers can impersonate and take over any remote account. Every Mastodon version prior to 3.5.17 is vulnerable, as well as 4.0.x versions prior to 4.0.13, 4.1.x version prior to 4.1.13, and 4.2.x versions…

Severity
Critical 9.8
Published
1 Feb 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
3.5.17, 4.0.13, 4.1.13, 4.2.5
Sources
NVD

Affected software

SoftwareAffected versions
MastodonServers and applications · cpe:a:joinmastodon:mastodon
  • Every version before 3.5.17
  • From 4.0.0 before 4.0.13
  • From 4.1.0 before 4.1.13
  • From 4.2.0 before 4.2.5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-23832
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-23832