Rocket.Chat 6.2.0 Release Candidate 11

CPE Details

Rocket.Chat 6.2.0 Release Candidate 11
rocket.chat
rocket.chat
6.2.0
2024-10-03
15h57 +00:00
2024-10-03
15h57 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:rocket.chat:rocket.chat:6.2.0:rc11:*:*:*:*:*:*

Informations

Vendor

rocket.chat

Product

rocket.chat

Version

6.2.0

Update

rc11

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2024-46934 2024-09-24 00h00 +00:00 Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier is vulnerable to DOM-based Cross-site Scripting (XSS). Attackers may be able to abuse the UpdateOTRAck method to forge a message that contains an XSS payload.
6.1
Moyen
CVE-2024-46935 2024-09-24 00h00 +00:00 Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier is vulnerable to denial of service (DoS). Attackers who craft messages with specific characters may crash the workspace due to an issue in the message parser.
7.5
Haute
CVE-2024-47048 2024-09-24 00h00 +00:00 Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier allows stored XSS in the description and release notes of the marketplace and private apps.
5.4
Moyen
CVE-2024-45621 2024-09-02 00h00 +00:00 The Electron desktop application of Rocket.Chat through 6.3.4 allows stored XSS via links in an uploaded file, related to failure to use a separate browser upon encountering third-party external actions from PDF documents.
5.4
Moyen
CVE-2024-39713 2024-08-05 04h26 +00:00 A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1.
8.6
Haute