{"id":"CVE-2022-35246","aliases":["EUVD-2022-38138","GHSA-9xw6-hr9q-88xg"],"status":"published","title":"A NoSQL-Injection information disclosure vulnerability vulnerability exists in Rocket.Chat \u003cv5, ...","description":"A NoSQL-Injection information disclosure vulnerability vulnerability exists in Rocket.Chat \u003cv5, \u003cv4.8.2 and \u003cv4.7.5 in the getS3FileUrl Meteor server method that can disclose arbitrary file upload URLs to users that should not be able to access.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00737,"percentile":0.54783,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200","CWE-74"],"published":"2022-09-23T18:28:12Z","modified":"2026-10-28T02:30:53Z","products":[{"vendor":"rocket.chat","product":"rocket.chat"}],"references":[{"url":"https://hackerone.com/reports/1458020","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-35246","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-9xw6-hr9q-88xg"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/35xxx/CVE-2022-35246.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-35246","description":"A NoSQL-Injection information disclosure vulnerability vulnerability exists in Rocket.Chat \u003cv5, \u003cv4.8.2 and \u003cv4.7.5 in the getS3FileUrl Meteor server method that can disclose arbitrary file upload URLs to users that should not be able to access.","status":"published","published":"2022-09-23T18:28:12Z","modified":"2025-05-22T19:35:24.804Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:34:39.935681Z"}],"euvd":[{"id":"EUVD-2022-38138","description":"A NoSQL-Injection information disclosure vulnerability vulnerability exists in Rocket.Chat \u003cv5, \u003cv4.8.2 and \u003cv4.7.5 in the getS3FileUrl Meteor server method that can disclose arbitrary file upload URLs to users that should not be able to access.","status":"published","published":"2022-09-23T18:28:12Z","modified":"2025-05-22T19:35:24Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:32:39.383071Z"}],"ghsa":[{"id":"GHSA-9xw6-hr9q-88xg","title":"A NoSQL-Injection information disclosure vulnerability vulnerability exists in Rocket.Chat \u003cv5, ...","description":"A NoSQL-Injection information disclosure vulnerability vulnerability exists in Rocket.Chat \u003cv5, \u003cv4.8.2 and \u003cv4.7.5 in the getS3FileUrl Meteor server method that can disclose arbitrary file upload URLs to users that should not be able to access.","status":"published","published":"2022-09-25T00:00:17Z","modified":"2023-06-29T18:30:57Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-74","CWE-200"],"updated_at":"2026-11-02T14:54:39.908875Z"}],"nvd":[{"id":"CVE-2022-35246","description":"A NoSQL-Injection information disclosure vulnerability vulnerability exists in Rocket.Chat \u003cv5, \u003cv4.8.2 and \u003cv4.7.5 in the getS3FileUrl Meteor server method that can disclose arbitrary file upload URLs to users that should not be able to access.","status":"published","published":"2022-09-23T19:15:13.9Z","modified":"2026-06-17T04:51:37.363Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:07:28.501364Z"}],"osv":[{"id":"CVE-2022-35246","description":"A NoSQL-Injection information disclosure vulnerability vulnerability exists in Rocket.Chat \u003cv5, \u003cv4.8.2 and \u003cv4.7.5 in the getS3FileUrl Meteor server method that can disclose arbitrary file upload URLs to users that should not be able to access.","status":"published","published":"2022-09-23T18:28:12Z","modified":"2026-10-28T02:30:53.132065965Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:44:26.195407Z"}]}}