Non notée
CVE-2021-22910 A sanitization vulnerability exists in Rocket.Chat server…
Description
A sanitization vulnerability exists in Rocket.Chat server versions <3.13.2, <3.12.4, <3.11.4 that allowed queries to an endpoint which could result in a NoSQL injection, potentially leading to RCE.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Rocket.Chat server | Versions non publiées |
Autres CVE de Rocket.Chat server
Les 6 CVE de Rocket.Chat server →
CVE-2020-8291
A link preview rendering issue in Rocket.Chat versions before 3.9 could lead to potential XSS attacks
Non notée
CVE-2021-22892
An information disclosure vulnerability exists in the Rocket.Chat server fixed v3.13, v3.12.2 & v3.11.3 that allowed…
Non notée
CVE-2021-22911
A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to…
Non notée
CVE-2020-8292
Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability via the drag & drop…
Non notée