CVE-2024-6301

Published
View on NVD ↗
CVSS v3
5.3
MEDIUM
CVSS v2
N/A
Affected
1
PROJECT

Description

Lack of validation of origin in federation API in Conduit, allowing any remote server to impersonate any user from any server in most EDUs

Conduit is a simple, fast and reliable chat server powered by Matrix https://conduit.rs
GitLabGitLab
944