Lucene search
PRIOn knowledge basePRION:CVE-2022-32228HistorySep 23, 2022 - 7:15 p.m.
Information disclosure
2022-09-2319:15:00
PRIOn knowledge base
www.prio-n.com
3
rocket.chat
vulnerability
information disclosure
mongodb
nvd
An information disclosure vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 since the getReadReceipts Meteor server method does not properly filter user inputs that are passed to MongoDB queries, allowing $regex queries to enumerate arbitrary Message IDs.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rocket.chat | ge | 4.8.0 | |
| rocket.chat | lt | 4.8.2 | |
| rocket.chat | lt | 4.7.5 |
References
Related
nvd
nvd
CVE-2022-32228
2022-09-23 19:15:11
cnvd
cnvd
Rocket.Chat getReadReceipts Meteor information disclosure vulnerability
2022-09-28 00:00:00
cvelist
cvelist
CVE-2022-32228
2022-09-23 18:28:13
osv
osv
CVE-2022-32228
2022-09-23 19:15:11
hackerone
hackerone
cve
cve
CVE-2022-32228
2022-09-23 19:15:11