The Conduit Contributors vulnerabilities
We track 1 vulnerability in The Conduit Contributors products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 25, 2024.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest The Conduit Contributors vulnerabilities
- 8.8 High severity
Conduit: Missing Authorization
Missing authorization in Client-Server API in Conduit <=0.7.0, allowing for any alias to be removed and added to another room, which can be used for privilege escalation by moving the #admins alias to a room which they control, allowing them to run commands re