CVE-2024-34451

score

<0.1

cvss

9.1

epss

0.8%

published

2024-06-16

kev added

—

first seen

2026-10-21

Ghost version 5.85.1 contains a bypass for authentication rate-limit caused by using multiple X-Forwarded-For headers with different values, letting remote attackers bypass rate limiting, exploit requires attacker to control headers.