Non notée
CVE-2020-8292 Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability via the drag & drop…
Description
Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability via the drag & drop functionality in message boxes.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Rocket.Chat server | Versions non publiées |
Autres CVE de Rocket.Chat server
Les 6 CVE de Rocket.Chat server →
CVE-2020-8291
A link preview rendering issue in Rocket.Chat versions before 3.9 could lead to potential XSS attacks
Non notée
CVE-2021-22910
A sanitization vulnerability exists in Rocket.Chat server…
Non notée
CVE-2021-22892
An information disclosure vulnerability exists in the Rocket.Chat server fixed v3.13, v3.12.2 & v3.11.3 that allowed…
Non notée
CVE-2021-22911
A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to…
Non notée