713 matches found
CVE-2018-13879: Improper Neutralization of Input During Web Page Generation
A reflected XSS issue was discovered in the registration form in Rocket.Chat before 0.66. When one creates an account, the next step will ask for a username. This field will not save HTML control characters but an error will be displayed that shows the attempted username unescaped via...
CVE-2018-13878: Improper Neutralization of Input During Web Page Generation
An XSS issue was discovered in packages/rocketchat-mentions/Mentions.js in Rocket.Chat before 0.65. The real name of a username is displayed unescaped when the user is mentioned using the @ symbol in a channel or private chat. Consequently, it is possible to exfiltrate the secret token of every...
Sql injection
Rocket.Chat Server version 0.59 and prior is vulnerable to a NoSQL injection leading to administrator account takeover...
CVE-2017-1000493
Rocket.Chat Server version 0.59 and prior is vulnerable to a NoSQL injection leading to administrator account takeover...
CVE-2017-1000493
Rocket.Chat Server version 0.59 and prior is vulnerable to a NoSQL injection leading to administrator account takeover...
CVE-2017-1000493
CVE-2017-1000493 affects Rocket.Chat Server, 0.59 and earlier. The root cause is a NoSQL injection that can lead to an administrator account takeover. The connected records confirm the vulnerable component and the impact; there is no publicly documented remediation version within the provided doc...
CVE-2017-1000493
Rocket.Chat Server version 0.59 and prior is vulnerable to a NoSQL injection leading to administrator account takeover...
CVE-2017-1000493: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Rocket.Chat Server version 0.59 and prior is vulnerable to a NoSQL injection leading to administrator account takeover...
Rocket.Chat: Remote Code Execution in Rocket.Chat Desktop
Summary: The Markdown parser can be tricked into allowing arbitrary Javascript leading to "remote code execution". Description: By combining the "link" and inline code block we can trick the parser into breaking out of the current HTML attribute. This allows us to control other attributes of the...
CVE-2017-1000054
Rocket.Chat version 0.8.0 and newer is vulnerable to XSS in the markdown link parsing code for messages...
Design/Logic Flaw
Rocket.Chat version 0.8.0 and newer is vulnerable to XSS in the markdown link parsing code for messages...
CVE-2017-1000054
Rocket.Chat 0.8.0 and newer is affected by an XSS in the markdown link parsing code for messages. The vulnerability enables injection of arbitrary JavaScript into a victim’s browser, with potential token/session theft and unauthorized actions if a user views the affected content. Multiple sources...