| Package | Affected versions | Patched versions |
|---|---|---|
| rocket.chat | ≥ 4.8.0, < 4.8.2< 4.7.5 | 4.8.24.7.5 |
A information disclosure vulnerability exists in Rocket.chat <v5, <v4.8.2 and <v4.7.5 where the lack of ACL checks in the getRoomRoles Meteor method leak channel members with special roles to unauthorized clients.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free