← CVE Intelligence

CVE-2024-37405

Rocket.Chat / Rocket.Chat PUBLISHED

Description (CNA)

Livechat messages can be leaked by combining two NoSQL injections affecting livechat:loginByToken (pre-authentication) and livechat:loadHistory.

Affected (CNA)

Vendor / productVersions
Rocket.Chat / Rocket.Chataffected 6.10.0 before 6.10.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.