Lack of validation of origin in federation API in Conduit, allowing any remote server to impersonate any user from any server in most EDUs
{
"cna_assigner": "GitLab",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6301.json",
"cwe_ids": [
"CWE-346"
]
}