← Database

CVE-2024-6302

HIGH CVSS: 8.1 Published: 2024-06-25 Modified: 2026-06-17

Description

Lack of privilege checking when processing a redaction in Conduit versions v0.6.0 and lower, allowing a local user to redact any message from users on the same server, given that they are able to send redaction events.

Affected Platforms

Conduit Conduit

Weakness Type

CWE-280, NVD-CWE-Other

References