CVE-2024-6302

Published June 25th, 2024

View on NVD ↗

CVSS v3

8.1

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

Lack of privilege checking when processing a redaction in Conduit versions v0.6.0 and lower, allowing a local user to redact any message from users on the same server, given that they are able to send redaction events.

famedly/conduit

Conduit is a simple, fast and reliable chat server powered by Matrix https://conduit.rs

GitLab

944