Sign in

Not rated

CVE-2020-8291 A link preview rendering issue in Rocket.Chat versions before 3.9 could lead to potential XSS attacks

Description

A link preview rendering issue in Rocket.Chat versions before 3.9 could lead to potential XSS attacks.

Affected products and versions

Product	Affected versions	Fixed in
Rocket.Chat server	Versions not published

The 6 CVEs of Rocket.Chat server →

CVE-2021-22910 A sanitization vulnerability exists in Rocket.Chat server… Not rated CVE-2021-22892 An information disclosure vulnerability exists in the Rocket.Chat server fixed v3.13, v3.12.2 & v3.11.3 that allowed… Not rated CVE-2021-22911 A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to… Not rated CVE-2020-8292 Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability via the drag & drop… Not rated

Do you use Rocket.Chat server?

Track this CVE Watch Rocket.Chat server Check my SBOMs

www.cveye.io/en/cve/CVE-2020-8291

Timeline

Published October 18, 2021
Last modified August 4, 2024

References

github.com github.com

Track this CVE