Skip to contentRocket.chat vulnerabilities
Newest
- rocket.chatA command injection vulnerability exists in Rocket.Chat-Desktop <3.8.14 that could allow an...CVE-2022-445679.8 Critical
- rocket.chatAn information disclosure vulnerability exists in Rocket.Chat <v5 due to the...CVE-2022-322206.5 Medium
- rocket.chatAn information disclosure vulnerability exists in Rocket.Chat <v4.7.5 which allowed the "users...CVE-2022-322194.3 Medium
- rocket.chatA cleartext storage of sensitive information exists in Rocket.Chat <v4.6.4 due to Oauth token...CVE-2022-322175.3 Medium
- rocket.chatA SQL injection vulnerability exists in Rocket.Chat <v3.18.6, <v4.4.4 and <v4.7.3 which can allow...CVE-2022-322118.8 High
- rocket.chatAn improper authentication vulnerability exists in Rocket.Chat Mobile App <4.14.1.22788 that...CVE-2022-301246.8 Medium
- rocket.chatA information disclosure vulnerability exists in Rocket.chat <v5, <v4.8.2 and <v4.7.5 where the...CVE-2022-352474.3 Medium
- rocket.chatA information disclosure vulnerability exists in Rockert.Chat <v5 due to /api/v1/chat...CVE-2022-322294.3 Medium
- rocket.chatAn information disclosure vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 since the...CVE-2022-322284.3 Medium
- rocket.chatA cleartext transmission of sensitive information exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5...CVE-2022-322276.5 Medium
- rocket.chatAn improper access control vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 due to...CVE-2022-322264.3 Medium
- rocket.chatAn information disclosure vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 due to the...CVE-2022-322184.3 Medium
- rocket.chatA cross-site scripting vulnerability exists in Rocket.chat <v5 due to style injection in the...CVE-2022-352515.4 Medium
- rocket.chatA privilege escalation vulnerability exists in Rocket.chat <v5 which made it possible to elevate...CVE-2022-352504.3 Medium
- rocket.chatA information disclosure vulnerability exists in Rocket.Chat <v5 where the...CVE-2022-352494.3 Medium
- rocket.chatA improper authentication vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 that...CVE-2022-352488.8 High
- rocket.chatA NoSQL-Injection information disclosure vulnerability vulnerability exists in Rocket.Chat <v5, ...CVE-2022-352464.3 Medium
- rocket.chat livechatCross-site Scripting in @rocket.chat/livechatCVE-2022-21830Fix available6.1 Medium
- rocket.chatA link preview rendering issue in Rocket.Chat versions before 3.9 could lead to potential XSS...CVE-2020-82916.1 Medium
- rocket.chatReDOS in Rocket.ChatCVE-2021-328324.3 Medium
- rocket.chatA sanitization vulnerability exists in Rocket.Chat server versions <3.13.2, <3.12.4, <3.11.4 that...CVE-2021-229109.8 Critical
- rocket.chatThe Rocket.Chat desktop application 2.17.11 opens external links without user interaction.CVE-2020-267637.5 High
- rocket.chatAn information disclosure vulnerability exists in the Rocket.Chat server fixed v3.13, v3.12.2 &...CVE-2021-228927.5 High
- rocket.chatA improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that...CVE-2021-22911Public exploitEPSS 95.2%9.8 Critical
- rocket.chatRocket.Chat before 3.11, 3.10.5, 3.9.7, 3.8.8 is vulnerable to persistent cross-site scripting ...CVE-2021-228866.1 Medium
- rocket.chatRocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability...CVE-2020-82925.4 Medium
- rocket.chatThe `specializedRendering` function in Rocket.Chat server before 3.9.2 allows a cross-site...CVE-2020-82885.4 Medium
- rocket.chatAn email address enumeration vulnerability exists in the password reset function of Rocket.Chat...CVE-2020-28208EPSS 10.8%5.3 Medium
- rocket.chatRocket.Chat before 0.74.4, 1.x before 1.3.4, 2.x before 2.4.13, 3.x before 3.7.3, 3.8.x before 3...CVE-2020-295949.8 Critical
- rocket.chatRocket.Chat through 3.4.2 allows XSS where an attacker can send a specially crafted message to a...CVE-2020-159266.1 Medium
- rocket.chatRocket.Chat before 2.1.0 allows XSS via a URL on a ![title] line.CVE-2019-17220Public exploit6.1 Medium
- rocket.chatA reflected XSS issue was discovered in the registration form in Rocket.Chat before 0.66. When...CVE-2018-138795.4 Medium
- rocket.chatAn XSS issue was discovered in packages/rocketchat-mentions/Mentions.js in Rocket.Chat before 0...CVE-2018-138786.1 Medium
- rocket.chatRocket.Chat Server version 0.59 and prior is vulnerable to a NoSQL injection leading to...CVE-2017-10004939.8 Critical