CVE-2020-15926

Rocket.Chat through 3.4.2 allows XSS where an attacker can send a specially crafted message to a channel or in a direct message to the client which results in remote code execution on the client side...

CVE-2020-15926

Rocket.Chat versions up to 3.4.2 are affected by an XSS vulnerability that can lead to remote code execution on the client side when a specially crafted message is sent in a channel or direct message. The issue arises from insufficient validation of client-side data within the web application, en...

CVE-2020-15926

creationtimestamp| type| source ---|---|--- 2020-08-18 17:05:06+00:00| published-proof-of-concept| https://t.me/cKure/1899 2020-08-18 18:25:31+00:00| published-proof-of-concept| Telegram/hwWiOwiVxnRks4KT2xytOlx4VQU5Jn7duUGpEOxKQPSq8SU5 2020-08-18 18:58:41+00:00| published-proof-of-concept|...