Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier is vulnerable to DOM-based Cross-site Scripting (XSS). Attackers may be able to abuse the UpdateOTRAck method to forge a message that contains an XSS payload.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Rocket.Chat 安全漏洞
Vulnerability Description
Rocket.Chat是Rocket.Chat公司的一个聊天软件。 Rocket.Chat存在安全漏洞。攻击者利用该漏洞能够滥用UpdateOTRAck方法。以下版本受到影响：6.12.0版本、6.11.2版本、6.10.5版本、6.9.6版本、6.8.6版本、6.7.8版本及之前版本。
CVSS Information
N/A
Vulnerability Type
N/A