CVE-2024-6302
Improper Handling of Insufficient Permissions or Privileges in Conduit
Résumé
Improper Handling of Insufficient Permissions or Privileges in Conduit
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Lack of privilege checking when processing a redaction in Conduit versions v0.6.0 and lower, allowing a local user to redact any message from users on the same server, given that they are able to send redaction events.
Références
- advisory github.com
- advisory nvd.nist.gov
- web conduit.rs
- web gitlab.com