PT-2022-21157

Name of the Vulnerable Software and Affected Versions Rocket.Chat versions prior to 4.7.5 Description An information disclosure issue exists, allowing virtually any authenticated user to access any data, except password hashes, of any other authenticated user. This is due to the "users.list" REST...