Vulnerabilities > Joinmastodon > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-02-01 CVE-2024-23832 Authentication Bypass by Spoofing vulnerability in Joinmastodon Mastodon
Mastodon is a free, open-source social network server based on ActivityPub Mastodon allows configuration of LDAP for authentication.
network
low complexity
joinmastodon CWE-290
critical
9.8
2023-07-06 CVE-2023-36460 Path Traversal vulnerability in Joinmastodon Mastodon
Mastodon is a free, open-source social network server based on ActivityPub.
network
low complexity
joinmastodon CWE-22
critical
9.9
2022-11-16 CVE-2022-2166 Improper Restriction of Excessive Authentication Attempts vulnerability in Joinmastodon Mastodon
Improper Restriction of Excessive Authentication Attempts in GitHub repository mastodon/mastodon prior to 4.0.0.
network
low complexity
joinmastodon CWE-307
critical
9.8