Описание
A vulnerability has been discovered in Rocket.Chat, where messages can be hidden regardless of the Message_KeepHistory or Message_ShowDeletedStatus server configuration. This allows users to bypass the intended message deletion behavior, hiding messages and deletion notices.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:rocket.chat:rocket.chat:-:*:*:*:*:*:*:*
EPSS
Процентиль: 9%
0.00032
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-285
NVD-CWE-noinfo
CWE-346
Связанные уязвимости
CVSS3: 5.3
github
больше 2 лет назад
A vulnerability has been discovered in Rocket.Chat, where messages can be hidden regardless of the Message_KeepHistory or Message_ShowDeletedStatus server configuration. This allows users to bypass the intended message deletion behavior, hiding messages and deletion notices.
EPSS
Процентиль: 9%
0.00032
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-285
NVD-CWE-noinfo
CWE-346