Not rated
CVE-2021-22910 A sanitization vulnerability exists in Rocket.Chat server…
Description
A sanitization vulnerability exists in Rocket.Chat server versions <3.13.2, <3.12.4, <3.11.4 that allowed queries to an endpoint which could result in a NoSQL injection, potentially leading to RCE.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Rocket.Chat server | Versions not published |
Other CVEs of Rocket.Chat server
The 6 CVEs of Rocket.Chat server →
CVE-2020-8291
A link preview rendering issue in Rocket.Chat versions before 3.9 could lead to potential XSS attacks
Not rated
CVE-2021-22892
An information disclosure vulnerability exists in the Rocket.Chat server fixed v3.13, v3.12.2 & v3.11.3 that allowed…
Not rated
CVE-2021-22911
A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to…
Not rated
CVE-2020-8292
Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability via the drag & drop…
Not rated