Cross site scripting

2021-03-2619:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

43.1%

JSON

Rocket.Chat before 3.11, 3.10.5, 3.9.7, 3.8.8 is vulnerable to persistent cross-site scripting (XSS) using nested markdown tags allowing a remote attacker to inject arbitrary JavaScript in a message. This flaw leads to arbitrary file read and RCE on Rocket.Chat desktop app.

CPENameOperatorVersion
rocket.chateq3.11.0 rc0
rocket.chateq3.11.0 rc1
rocket.chateq3.11.0 rc2
rocket.chateq3.11.0 rc3
rocket.chateq3.11.0 rc4
rocket.chateq3.11.0 rc5
rocket.chateq3.11.0 rc6
rocket.chateq3.11.0 rc7
rocket.chatge3.10.0
rocket.chatlt3.10.5

Name	Operator	Version
rocket.chat	eq	3.11.0 rc0
rocket.chat	eq	3.11.0 rc1
rocket.chat	eq	3.11.0 rc2
rocket.chat	eq	3.11.0 rc3
rocket.chat	eq	3.11.0 rc4
rocket.chat	eq	3.11.0 rc5
rocket.chat	eq	3.11.0 rc6
rocket.chat	eq	3.11.0 rc7
rocket.chat	ge	3.10.0
rocket.chat	lt	3.10.5