Description
Lack of validation of origin in federation API in Conduit, allowing any remote server to impersonate any user from any server in most EDUs
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| The Conduit Contributors | Conduit | < 0.8.0 | 0.8.0 |
Medium · 5.3
CVE-2024-6301
EUVD-2024-47418GHSA-j288-6xgr-g898
Origin Validation Error in Conduit
Published Jun 25, 2024 · Updated Aug 29, 2024 · Assigned by GitLab