CVE-2022-35250

n/a / Rocket.chat PUBLISHED

Description (CNA)

A privilege escalation vulnerability exists in Rocket.chat <v5 which made it possible to elevate privileges for any authenticated user to view Direct messages without appropriate permissions.

Affected (CNA)

Vendor / product	Versions
n/a / Rocket.chat	affected Fixed in 5.0>

CWE

No CWE identifiers supplied.

References

https://hackerone.com/reports/917946

ADP enrichment

CVE

No English description supplied.

https://hackerone.com/reports/917946

CISA-ADP

No English description supplied.

No references supplied.