Description (CNA)
Rocket.Chat is an open-source fully customizable communications platform developed in JavaScript. In Rocket.Chat before versions 3.11.3, 3.12.2, and 3.13 an issue with certain regular expressions could lead potentially to Denial of Service. This was fixed in versions 3.11.3, 3.12.2, and 3.13.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| RocketChat / Rocket.Chat | affected < 3.11.3 |
CWE
CWE-400
References
- https://docs.rocket.chat/guides/security/security-updates
- https://securitylab.github.com/advisories/GHSL-2020-310-redos-Rocket.Chat/
- https://github.com/RocketChat/Rocket.Chat/releases/tag/3.11.3
- https://github.com/RocketChat/Rocket.Chat/commit/4a0dce973e37ec3f56ca2231d6030511dbdd094c
ADP enrichment
No English description supplied.