Not rated
CVE-2020-8292 Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability via the drag & drop…
Description
Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability via the drag & drop functionality in message boxes.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Rocket.Chat server | Versions not published |
Other CVEs of Rocket.Chat server
The 6 CVEs of Rocket.Chat server →
CVE-2020-8291
A link preview rendering issue in Rocket.Chat versions before 3.9 could lead to potential XSS attacks
Not rated
CVE-2021-22910
A sanitization vulnerability exists in Rocket.Chat server…
Not rated
CVE-2021-22892
An information disclosure vulnerability exists in the Rocket.Chat server fixed v3.13, v3.12.2 & v3.11.3 that allowed…
Not rated
CVE-2021-22911
A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to…
Not rated