| Package | Affected versions | Patched versions |
|---|---|---|
| rocket.chat | ≥ 3.12.0, < 3.12.4≥ 3.13.0, < 3.13.2< 3.11.4 | 3.12.43.13.23.11.4 |
A sanitization vulnerability exists in Rocket.Chat server versions <3.13.2, <3.12.4, <3.11.4 that allowed queries to an endpoint which could result in a NoSQL injection, potentially leading to RCE.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free