CVE-2024-6301

MEDIUM CVSS: 5.3 Published: 2024-06-25 Modified: 2026-06-17

Description

Lack of validation of origin in federation API in Conduit, allowing any remote server to impersonate any user from any server in most EDUs

Affected Platforms

Conduit Conduit

Weakness Type

CWE-346, CWE-346

References