Skip to content
OpenAdvisories

Vendor

The Conduit Contributors

5 known vulnerabilities.

Products

Conduit 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2024-6299

    Use of a Key Past its Expiration Date in Conduit

    Lack of consideration of key expiry when validating signatures in Conduit, allowing an attacker which has compromised an expired key to forge requests as the remote server, as well as PDUs with timestamps past the expiry date

    The Conduit Contributors Conduit
  • Medium 5.3
    CVE-2024-6301

    Origin Validation Error in Conduit

    Lack of validation of origin in federation API in Conduit, allowing any remote server to impersonate any user from any server in most EDUs

    The Conduit Contributors Conduit