Lucene search
+L

2 matches found

Hacker One
Hacker One
added 2020/04/08 11:45 a.m.49 views

Rocket.Chat: Desktop app RCE (#276031 bypass)

Summary: 276031 fix bypass, two click remote code execution. Description: The security issue is in links preload file https://github.com/RocketChat/Rocket.Chat.Electron/blob/master/src/preload/links.js file. By rewriting RegExp.prototype.test method it is possible to prepare proper answers to get...

0.8AI score
SaveExploits0
Rows per page
Query Builder