CVE-2022-32228

🗓️ 23 Sep 2022 18:28:13Reported by hackeroneType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 66 Views

Information disclosure vulnerability in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 allows enumeration of arbitrary Message IDs

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-32228	23 Sep 202222:27	–	circl
CNNVD	Rocket.Chat 安全漏洞	23 Sep 202200:00	–	cnnvd
CNVD	Rocket.Chat getReadReceipts Meteor Information Disclosure Vulnerability	28 Sep 202200:00	–	cnvd
Cvelist	CVE-2022-32228	23 Sep 202218:28	–	cvelist
EUVD	EUVD-2022-53428	3 Oct 202520:07	–	euvd
Hacker One	Rocket.Chat: Message ID Enumeration with Regular Expression in getReadReceipts Meteor method	21 Oct 202111:16	–	hackerone
NVD	CVE-2022-32228	23 Sep 202219:15	–	nvd
Prion	Information disclosure	23 Sep 202219:15	–	prion
Positive Technologies	PT-2022-4944 · Unknown · Rocket.Chat	1 Jun 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-32228	22 May 202522:56	–	redhatcve

NVD

Vulners

Node

rocket.chat rocket.chatRange<4.7.5

rocket.chat rocket.chatRange4.8.0–4.8.2

[
  {
    "product": "Rocket.Chat",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in versions 4.7.5, 4.8.2 and 5.0.0"
      }
    ]
  }
]