Description
Lack of privilege checking when processing a redaction in Conduit versions v0.6.0 and lower, allowing a local user to redact any message from users on the same server, given that they are able to send redaction events.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| The Conduit Contributors | Conduit | < 0.7.0 | 0.7.0 |