CVE-2024-6301

5.3

MEDIUMCVSS v3

Published

June 25, 2024

Affected

3 projects

Assigned by

Severity scale

010

Description

Lack of validation of origin in federation API in Conduit, allowing any remote server to impersonate any user from any server in most EDUs

NPMEvented pipelines.

< 0.8.0NVD

GitHubPipeline constructor for Node.js.

< 0.8.0NVD

GitLab

Conduit is a simple, fast and reliable chat server powered by Matrix https://conduit.rs

< 0.8.0NVD