CVE-2024-6301

Mô tả

Tham khảo

• conduit.rs/changelog · Release Notes
• gitlab.com/famedly/conduit/-/releases/v0.8.0 · Release Notes

Lỗ hổng khác của conduit

• CVE-2024-6303CAO 8.8Missing authorization in Client-Server API in Conduit <=0.7.0, allowing for any alias to be removed and added to another room, which can be …
• CVE-2024-6302TRUNG BÌNH 5.5Lack of privilege checking when processing a redaction in Conduit versions v0.6.0 and lower, allowing a local user to redact any message fro…
• CVE-2024-6300TRUNG BÌNH 5.3Incomplete cleanup when performing redactions in Conduit, allowing an attacker to check whether certain strings were present in the PDU befo…
• CVE-2024-6299THẤP 3.7Lack of consideration of key expiry when validating signatures in Conduit, allowing an attacker which has compromised an expired key to forg…