Lucene search

[email protected]CVE-2021-22886

HistoryMar 26, 2021 - 7:15 p.m.

CVE-2021-22886

2021-03-2619:15:11

CWE-79

[email protected]

web.nvd.nist.gov

108

rocket.chat

3.11

3.10.5

3.9.7

3.8.8

cve-2021-22886

xss

rce

remote code execution

security vulnerability

nvd

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

42.9%

JSON

Rocket.Chat before 3.11, 3.10.5, 3.9.7, 3.8.8 is vulnerable to persistent cross-site scripting (XSS) using nested markdown tags allowing a remote attacker to inject arbitrary JavaScript in a message. This flaw leads to arbitrary file read and RCE on Rocket.Chat desktop app.

Affected configurations

NVD

Node

rocket.chatrocket.chatRange<3.8.8

rocket.chatrocket.chatRange3.9.0–3.9.7

rocket.chatrocket.chatRange3.10.0–3.10.5

rocket.chatrocket.chatMatch3.11.0rc0

rocket.chatrocket.chatMatch3.11.0rc1

rocket.chatrocket.chatMatch3.11.0rc2

rocket.chatrocket.chatMatch3.11.0rc3

rocket.chatrocket.chatMatch3.11.0rc4

rocket.chatrocket.chatMatch3.11.0rc5

rocket.chatrocket.chatMatch3.11.0rc6

rocket.chatrocket.chatMatch3.11.0rc7

CPENameOperatorVersion
rocket.chat:rocket.chatrocket.chatlt3.8.8
rocket.chat:rocket.chatrocket.chatlt3.9.7
rocket.chat:rocket.chatrocket.chatlt3.10.5
rocket.chat:rocket.chatrocket.chateq3.11.0

CPE	Name	Operator	Version
rocket.chat:rocket.chat	rocket.chat	lt	3.8.8
rocket.chat:rocket.chat	rocket.chat	lt	3.9.7
rocket.chat:rocket.chat	rocket.chat	lt	3.10.5
rocket.chat:rocket.chat	rocket.chat	eq	3.11.0

CNA Affected

[
  {
    "product": "Rocket.Chat ",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in 3.11, 3.10.5, 3.9.7, 3.8.8"
      }
    ]
  }
]

References

docs.rocket.chat/guides/security/security-updates

github.com/RocketChat/Rocket.Chat/pull/20430

hackerone.com/reports/1014459

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

42.9%

JSON

Related for CVE-2021-22886

hackerone1 cvelist1 osv1 prion1 nvd1