Lucene search

CVE-2023-23911

🗓️ 10 Mar 2023 22:10:15Reported by hackeroneType

An access control vulnerability pre v6 allows E2E encryption compromise by changing chat room group key

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
OSV	CVE-2023-23911	10 Mar 202322:15	–	osv
NVD	CVE-2023-23911	10 Mar 202322:15	–	nvd
Vulnrichment	CVE-2023-23911	10 Mar 202300:00	–	vulnrichment
Hacker One	Rocket.Chat: Low authorization level at server side API operation e2e.updateGroupKey, let an attacker break the E2E architecture.	1 Nov 202216:55	–	hackerone
Prion	Improper access control	10 Mar 202322:15	–	prion
Cvelist	CVE-2023-23911	10 Mar 202300:00	–	cvelist

Nvd

Vulners

Node

rocket.chat rocket.chatRange<6.0.0

[
  {
    "vendor": "n/a",
    "product": "Rocket.Chat",
    "versions": [
      {
        "version": "fixed version => 6.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
hackerone	www.hackerone.com/reports/1757663

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Mar 2023 22:15Current

7.4High risk

Vulners AI Score7.4

CVSS37.5

EPSS0.00078

SSVC