| Package | Affected versions | Patched versions |
|---|---|---|
| rocket.chat | < 5.0 | 5.0 |
A information disclosure vulnerability exists in Rockert.Chat <v5 due to /api/v1/chat.getThreadsList lack of sanitization of user inputs and can therefore leak private thread messages to unauthorized users via Mongo DB injection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free