Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A information disclosure vulnerability exists in Rockert.Chat <v5 due to /api/v1/chat.getThreadsList lack of sanitization of user inputs and can therefore leak private thread messages to unauthorized users via Mongo DB injection.
CVSS Information
N/A
Vulnerability Type
信息暴露
Vulnerability Title
Rocket.Chat 安全漏洞
Vulnerability Description
Rocket.Chat是一套开源的团队聊天软件。 Rocket.Chat Mobile App 5之前版本存在安全漏洞，该漏洞源于/api/v1/chat.getThreadsList 缺乏对用户输入的清理，攻击者利用该漏洞可以通过 Mongo DB 注入将私有线程消息泄露给未经授权的用户。
CVSS Information
N/A
Vulnerability Type
N/A