PT-2023-21650

Name of the Vulnerable Software and Affected Versions Rocket.Chat versions prior to 6.0 Description An improper authorization issue exists that could allow a hacker to manipulate the rid parameter and change the updateMessage method, which only checks whether the user is allowed to edit a message...