← CVE Intelligence

CVE-2024-6302

Improper Handling of Insufficient Permissions or Privileges in Conduit PUBLISHED

Description (CNA)

Lack of privilege checking when processing a redaction in Conduit versions v0.6.0 and lower, allowing a local user to redact any message from users on the same server, given that they are able to send redaction events.

Affected (CNA)

Vendor / productVersions
The Conduit Contributors / Conduitaffected 0 before 0.7.0

CWE

CWE-280

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.