Rocket.Chat
Approved changes feed: RSS · Atom
cpe:2.3:a:rocket.chat:rocket.chat:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Rocket.Chat (617b1e93-7861-5e45-ab59-92186372afa4) |
|---|---|
| Product | Rocket.Chat (e5bf3e71-5ab4-55f1-a289-af2224ae2fe5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/rocketchat/rocket.chat |
purl2cpe | 2026-06-01 10:18:04.341475 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-37405 |
vulnerable | 2026-06-08 06:39:47.498081 |
Details available
MEDIUM (6.5)
Livechat messages can be leaked by combining two NoSQL injections affecting livechat:loginByToken (pre-authentication) and livechat:loadHistory.
Published: 2024-07-12T15:41:03.461Z
Updated: 2024-08-02T03:50:56.177Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28318 |
vulnerable | 2026-06-08 06:01:10.334664 |
Details available
A vulnerability has been discovered in Rocket.Chat, where messages can be hidden regardless of the Message_KeepHistory or Message_ShowDeletedStatus server configuration. This allows users to bypass the intended message deletion behavior, hiding messages and deletion notices.
Published: 2023-05-09T00:00:00.000Z
Updated: 2025-01-28T20:28:02.478Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28317 |
vulnerable | 2026-06-08 06:01:10.334297 |
Details available
A vulnerability has been discovered in Rocket.Chat, where editing messages can change the original timestamp, causing the UI to display messages in an incorrect order.
Published: 2023-05-09T00:00:00.000Z
Updated: 2025-01-28T20:33:33.813Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28316 |
vulnerable | 2026-06-08 06:01:10.322933 |
Details available
A security vulnerability has been discovered in the implementation of 2FA on the rocket.chat platform, where other active sessions are not invalidated upon activating 2FA. This could potentially allow an attacker to maintain access to a compromised account even after 2FA is enabled.
Published: 2023-05-09T00:00:00.000Z
Updated: 2025-01-28T20:38:20.621Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.