Filtered by vendor Rocket.chat
Subscriptions
Total
44 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2020-29594 | 1 Rocket.chat | 1 Rocket.chat | 2021-01-04 | 9.8 Critical |
| Rocket.Chat before 0.74.4, 1.x before 1.3.4, 2.x before 2.4.13, 3.x before 3.7.3, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 mishandles SAML login. | ||||
| CVE-2020-15926 | 1 Rocket.chat | 1 Rocket.chat | 2020-08-20 | 6.1 Medium |
| Rocket.Chat through 3.4.2 allows XSS where an attacker can send a specially crafted message to a channel or in a direct message to the client which results in remote code execution on the client side. | ||||
| CVE-2019-17220 | 1 Rocket.chat | 1 Rocket.chat | 2019-10-23 | 6.1 Medium |
| Rocket.Chat before 2.1.0 allows XSS via a URL on a ![title] line. | ||||
| CVE-2017-1000493 | 1 Rocket.chat | 1 Rocket.chat | 2019-05-01 | N/A |
| Rocket.Chat Server version 0.59 and prior is vulnerable to a NoSQL injection leading to administrator account takeover | ||||