← All advisories

Medium severity5.3NVD Advisory· Published Jun 25, 2024· Updated Jun 17, 2026

CVE-2024-6301

CVE-2024-6301

Description

Lack of validation of origin in federation API in Conduit, allowing any remote server to impersonate any user from any server in most EDUs

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Conduit/Conduitllm-create
Range: <0.8.0
The Conduit Contributors/Conduitv5
Range: 0

Patches

Vulnerability mechanics

References

2

conduit.rs/changelog/nvdRelease Notes
gitlab.com/famedly/conduit/-/releases/v0.8.0nvdRelease Notes

News mentions

0

No linked articles in our index yet.