A sanitization vulnerability exists in Rocket.Chat server versions <3.13.2, <3.12.4, <3.11.4 that allowed queries to an endpoint which could result in a NoSQL injection, potentially leading to RCE.
CPE | Name | Operator | Version |
---|---|---|---|
rocket.chat | ge | 3.13.0 | |
rocket.chat | lt | 3.13.2 | |
rocket.chat | ge | 3.12.0 | |
rocket.chat | lt | 3.12.4 | |
rocket.chat | lt | 3.11.4 |