← CVE Intelligence

CVE-2020-8292

n/a / Rocket.Chat server PUBLISHED

Description (CNA)

Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability via the drag & drop functionality in message boxes.

Affected (CNA)

Vendor / productVersions
n/a / Rocket.Chat serveraffected Fixed in 3.9.0

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.