CVE-2024-6301CWE-346

Origin Validation Error in Conduit

Medium · published June 25, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

Lack of validation of origin in federation API in Conduit, allowing any remote server to impersonate any user from any server in most EDUs

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00168 · 5.9th percentile
Weakness
CWE-346 · Origin Validation Error
Published
2024-06-25T13:02Z
EPSS history
Timeline
  • 25 JUN 13:02Z
    Origin Validation Error in Conduit
    cvelistv5