CVE-2024-6300

Incomplete cleanup when performing redactions in Conduit, allowing an attacker to check whether certain strings were present in the PDU before redaction

Score

CVSS 3.1 5.3 Medium

Status

Modified - cve@gitlab.com

Published

2024-06-25

Last modified

2024-08-29

Weaknesses

CWE-459

Affected products

• Conduit (Conduit)
• Conduit (The Conduit Contributors)

References

• https://conduit.rs/changelog/#v0-8-0-2024-06-12
• https://gitlab.com/famedly/conduit/-/releases/v0.8.0