Not rated
CVE-2023-23911 An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption…
Description
An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption of a chat room by a user changing the group key of a chat room.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Rocket.Chat | Versions not published |
Other CVEs of Rocket.Chat
The 26 CVEs of Rocket.Chat →
CVE-2023-28359
A NoSQL injection vulnerability has been identified in the listEmojiCustom method call within Rocket.Chat
5.3
Medium
CVE-2023-28325
An improper authorization vulnerability exists in…
6.5
Medium
CVE-2023-28356
A vulnerability has been identified where a maliciously crafted message containing a specific chain of characters can…
7.5
High
CVE-2023-28358
A vulnerability has been discovered in Rocket.Chat where a markdown parsing issue in the "Search Messages" feature…
6.1
Medium