Non notée
CVE-2020-8288 The `specializedRendering` function in Rocket.Chat server before 3.9.2 allows a cross-site scripting (XSS) vulnerability…
Description
The `specializedRendering` function in Rocket.Chat server before 3.9.2 allows a cross-site scripting (XSS) vulnerability by way of the `value` parameter.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Rocket.Chat server | Versions non publiées |
Autres CVE de Rocket.Chat server
Les 6 CVE de Rocket.Chat server →
CVE-2020-8291
A link preview rendering issue in Rocket.Chat versions before 3.9 could lead to potential XSS attacks
Non notée
CVE-2021-22910
A sanitization vulnerability exists in Rocket.Chat server…
Non notée
CVE-2021-22892
An information disclosure vulnerability exists in the Rocket.Chat server fixed v3.13, v3.12.2 & v3.11.3 that allowed…
Non notée
CVE-2021-22911
A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to…
Non notée