Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| mastodon | mastodon | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-36876 | Mastodon is a self-hosted, federated microblogging platform. Starting in version 2.6.0 and prior to versions 4.1.18 and 4.2.10, by crafting specific activities, an attacker can extend the audience of a post they do not own to other Mastodon users on a target server, thus gaining access to the contents of a post not intended for them. Versions 4.1.18 and 4.2.10 contain a patch for this issue. |
Tue, 24 Jun 2025 16:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Joinmastodon
Joinmastodon mastodon |
|
| CPEs | cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Joinmastodon
Joinmastodon mastodon |
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published:
Updated: 2024-08-02T04:04:23.423Z
Reserved: 2024-06-10T19:54:41.362Z
Link: CVE-2024-37903
Vulnrichment
Updated: 2024-08-02T04:04:23.423Z
NVD
Status : Analyzed
Published: 2024-07-05T18:15:32.093
Modified: 2025-06-24T16:04:05.977
Link: CVE-2024-37903
Redhat
No data.
OpenCVE Enrichment
No data.