PT-2024-37523 · Conduit · Conduit

Name of the Vulnerable Software and Affected Versions: Conduit affected versions not specified Description: The issue is related to a lack of validation of origin in the federation API in Conduit. This allows any remote server to impersonate any user from any server in most EDUs. Recommendations:...