← CVE Intelligence

CVE-2021-22910

n/a / Rocket.Chat server PUBLISHED

Description (CNA)

A sanitization vulnerability exists in Rocket.Chat server versions <3.13.2, <3.12.4, <3.11.4 that allowed queries to an endpoint which could result in a NoSQL injection, potentially leading to RCE.

Affected (CNA)

Vendor / productVersions
n/a / Rocket.Chat serveraffected Fixed versions: 3.13.2, 3.12.4, 3.11.4

CWE

CWE-75

References

ADP enrichment

CVE

No English description supplied.