Skip to content

Vulnerabilities of n/a Rocket.Chat

Is your version affected?

CVE Summary Score Published
CVE-2023-28359 A NoSQL injection vulnerability has been identified in the listEmojiCustom method call within Rocket.Chat 5.3 Medium May 11, 2023
CVE-2023-28358 A vulnerability has been discovered in Rocket.Chat where a markdown parsing issue in the "Search Messages" feature… 6.1 Medium May 11, 2023
CVE-2023-28357 A vulnerability has been identified in Rocket.Chat, where the ACL checks in the Slash Command /mute occur after checking… 4.3 Medium May 11, 2023
CVE-2023-28356 A vulnerability has been identified where a maliciously crafted message containing a specific chain of characters can… 7.5 High May 11, 2023
CVE-2023-28325 An improper authorization vulnerability exists in… 6.5 Medium May 11, 2023
CVE-2023-28318 A vulnerability has been discovered in Rocket.Chat, where messages can be hidden regardless of the Message_KeepHistory… 5.3 Medium May 9, 2023
CVE-2023-28317 A vulnerability has been discovered in Rocket.Chat, where editing messages can change the original timestamp, causing… 5.3 Medium May 9, 2023
CVE-2023-28316 A security vulnerability has been discovered in the implementation of 2FA on the rocket.chat platform, where other… 9.8 Critical May 9, 2023
CVE-2023-23911 An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption… Not rated Mar 10, 2023
CVE-2023-23917 A prototype pollution vulnerability exists in Rocket.Chat… 8.8 High Feb 23, 2023
CVE-2022-32220 An information disclosure vulnerability exists in… 6.5 Medium Sep 23, 2022
CVE-2022-32219 An information disclosure vulnerability exists in… 4.3 Medium Sep 23, 2022
CVE-2022-32211 A SQL injection vulnerability exists in… 8.8 High Sep 23, 2022
CVE-2022-32217 A cleartext storage of sensitive information exists in… 5.3 Medium Sep 23, 2022
CVE-2022-35247 A information disclosure vulnerability exists in… 4.3 Medium Sep 23, 2022
CVE-2022-32229 A information disclosure vulnerability exists in… 4.3 Medium Sep 23, 2022
CVE-2022-32228 An information disclosure vulnerability exists in… 4.3 Medium Sep 23, 2022
CVE-2022-32218 An information disclosure vulnerability exists in… 4.3 Medium Sep 23, 2022
CVE-2022-32227 A cleartext transmission of sensitive information exists in… 6.5 Medium Sep 23, 2022
CVE-2022-32226 An improper access control vulnerability exists in… 4.3 Medium Sep 23, 2022
CVE-2022-35251 A cross-site scripting vulnerability exists in… 5.4 Medium Sep 23, 2022
CVE-2022-35250 A privilege escalation vulnerability exists in… 4.3 Medium Sep 23, 2022
CVE-2022-35249 A information disclosure vulnerability exists in… 4.3 Medium Sep 23, 2022
CVE-2022-35248 A improper authentication vulnerability exists in… Not rated Sep 23, 2022
CVE-2022-35246 A NoSQL-Injection information disclosure vulnerability vulnerability exists in… 4.3 Medium Sep 23, 2022

Other n/a products