CVE-2024-6302
Improper Handling of Insufficient Permissions or Privileges in Conduit
Summary
Improper Handling of Insufficient Permissions or Privileges in Conduit
Original description
The description as published by the source.
Lack of privilege checking when processing a redaction in Conduit versions v0.6.0 and lower, allowing a local user to redact any message from users on the same server, given that they are able to send redaction events.
References
- advisory github.com
- advisory nvd.nist.gov
- web conduit.rs
- web gitlab.com