Description

Rocket.Chat before 3.11, 3.10.5, 3.9.7, 3.8.8 is vulnerable to persistent cross-site scripting (XSS) using nested markdown tags allowing a remote attacker to inject arbitrary JavaScript in a message. This flaw leads to arbitrary file read and RCE on Rocket.Chat desktop app.

Related CPE's

a

rocket.chat

rocket.chat

11

References

https://docs.rocket.chat/guides/security/security-updates

Vendor Advisory

https://github.com/RocketChat/Rocket.Chat/pull/20430

PatchThird Party Advisory

https://hackerone.com/reports/1014459

Third Party Advisory

Weaknesses

[email protected]

Primary
CWE-79

[email protected]

Secondary
CWE-79

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.1 · Medium

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2021-03-26T19:15:11.913

4 years ago

Last modified

2021-03-30T20:26:41.133

4 years ago