CVE-2024-6302
High
Description
Lack of privilege checking when processing a redaction in Conduit versions v0.6.0 and lower, allowing a local user to redact any message from users on the same server, given that they are able to send redaction events.
SeverityHigh
CVSS8.1
Exploit probability—
Product
Conduit
PublishedJun 25, 2024
First seenJun 25, 2024
Weakness typeCWE-280CWE-280
How to fix
Update
- conduit conduit0.7.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| conduit conduit | v < 0.7.0 | 0.7.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.