Lucene search
China National Vulnerability DatabaseCNVD-2022-88185HistorySep 28, 2022 - 12:00 a.m.
Rocket.Chat getUserMentionsByChannel meteor server authorization issue vulnerability
2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
rocket.chat
getusermentionsbychannel
authorization
vulnerability
meteor server
information leakage
sensitive information
exploitation
attackers
EPSS
0.001
Percentile
24.8%
Chat is a set of open source team chat software. Rocket.Chat versions prior to 5.0 have an authorization issue vulnerability that originates from the getUserMentionsByChannel meteor server method that leaks information and can be exploited by attackers to obtain sensitive information.
Related
nvd
nvd
CVE-2022-35249
2022-09-23 19:15:14
prion
prion
Information disclosure
2022-09-23 19:15:00
cvelist
cvelist
CVE-2022-35249
2022-09-23 18:28:12
cve
cve
CVE-2022-35249
2022-09-23 19:15:14
osv
osv
CVE-2022-35249
2022-09-23 19:15:14
hackerone
hackerone