CVE-2021-22886

CVE-2021-22886 affects Rocket.Chat prior to version 3.11, 3.10.5, 3.9.7, and 3.8.8. It enables persistent XSS via nested markdown tags that can inject JavaScript in messages, with impacts including arbitrary file read and RCE on the Rocket.Chat desktop app. Patches/updates have been released for ...