CVE-2024-6299

CVE-2024-6299 is a low-severity vulnerability in Conduit that stems from the system's failure to consider key expiry during signature validation. This flaw allows an attacker who has compromised an expired key to forge requests and Protocol Data Units (PDUs) with past expiry dates, impersonating the remote server. The attack requires high complexity, has no user interaction, and primarily impacts integrity with a CVSS score of 3.7. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.