Filtered by vendor Rocket.chat Subscriptions
Filtered by product Rocket.chat Subscriptions
Total 43 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-15926 1 Rocket.chat 1 Rocket.chat 2020-08-20 6.1 Medium
Rocket.Chat through 3.4.2 allows XSS where an attacker can send a specially crafted message to a channel or in a direct message to the client which results in remote code execution on the client side.
CVE-2019-17220 1 Rocket.chat 1 Rocket.chat 2019-10-23 6.1 Medium
Rocket.Chat before 2.1.0 allows XSS via a URL on a ![title] line.
CVE-2017-1000493 1 Rocket.chat 1 Rocket.chat 2019-05-01 N/A
Rocket.Chat Server version 0.59 and prior is vulnerable to a NoSQL injection leading to administrator account takeover