Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and before is vulnerable to a message forgery / impersonation issue. Attackers can abuse the UpdateOTRAck method to send ephemeral messages as if they were any other user they choose.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Rocket.Chat 安全漏洞
Vulnerability Description
Rocket.Chat是Rocket.Chat公司的一个聊天软件。 Rocket.Chat存在安全漏洞。攻击者利用该漏洞可以滥用UpdateOTRAck方法发送临时消息。以下版本受到影响：6.12.0版本、6.11.2版本、6.10.5版本、6.9.6版本、6.8.6版本、6.7.8版本及之前版本。
CVSS Information
N/A
Vulnerability Type
N/A