Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2024-6302

Improper Handling of Insufficient Permissions or Privileges in Conduit

Description

Lack of privilege checking when processing a redaction in Conduit versions v0.6.0 and lower, allowing a local user to redact any message from users on the same server, given that they are able to send redaction events.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The Conduit Contributors Conduit

Default version status: unaffected

  • 0 to < 0.7.0affected

References