6.5
Moyenne
CVE-2022-32227 A cleartext transmission of sensitive information exists in…
Description
A cleartext transmission of sensitive information exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 relating to Oauth tokens by having the permission "view-full-other-user-info", this could cause an oauth token leak in the product.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Rocket.Chat | Versions non publiées |
Références
- hackerone.com hackerone.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Rocket.Chat
Les 26 CVE de Rocket.Chat →
CVE-2023-28359
A NoSQL injection vulnerability has been identified in the listEmojiCustom method call within Rocket.Chat
5.3
Moyenne
CVE-2023-28325
An improper authorization vulnerability exists in…
6.5
Moyenne
CVE-2023-28356
A vulnerability has been identified where a maliciously crafted message containing a specific chain of characters can…
7.5
Élevée
CVE-2023-28358
A vulnerability has been discovered in Rocket.Chat where a markdown parsing issue in the "Search Messages" feature…
6.1
Moyenne