CVE-2024-6302

CVE-2024-6302 affects Conduit; vulnerability is a lack of privilege checking when processing redactions in versions v0.6.0 and earlier. A local user who can send redaction events can redact any message from users on the same server, enabling unauthorized message redaction. The issue is documented...