← CVE Intelligence

CVE-2024-6301

Origin Validation Error in Conduit PUBLISHED

Description (CNA)

Lack of validation of origin in federation API in Conduit, allowing any remote server to impersonate any user from any server in most EDUs

Affected (CNA)

Vendor / productVersions
The Conduit Contributors / Conduitaffected 0 before 0.8.0

CWE

CWE-346

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.