CVE-2024-47048 - Vulnerability Details

Vendors	Products
Rocket.chat	Rocket.chat

Link	Providers
https://docs.rocket.chat/docs/rocketchat-security-fixes-updates-and-advisories
https://github.com/RocketChat/Rocket.Chat/pull/33246

Type	Values Removed	Values Added
First Time appeared		Rocket.chat Rocket.chat rocket.chat
Weaknesses		CWE-79
CPEs		cpe:2.3:a:rocket.chat:rocket.chat:::::::: cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:-:::::: cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc1:::::: cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc2:::::: cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc3:::::: cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc4:::::: cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc5:::::: cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc6::::::
Vendors & Products		Rocket.chat Rocket.chat rocket.chat
Metrics		cvssV3_1 `{'score': 5.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N'}`

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier allows stored XSS in the description and release notes of the marketplace and private apps.
References		https://docs.rocket.chat/docs/rocketchat-security-fixes-updates-and-advisories https://github.com/RocketChat/Rocket.Chat/pull/33246

Show plain JSON

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2024-47048", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2025-03-25T16:10:41.543Z", "dateReserved": "2024-09-17T00:00:00.000Z", "datePublished": "2024-09-24T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-09-24T18:40:04.048Z"}, "descriptions": [{"lang": "en", "value": "Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier allows stored XSS in the description and release notes of the marketplace and private apps."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://github.com/RocketChat/Rocket.Chat/pull/33246"}, {"url": "https://docs.rocket.chat/docs/rocketchat-security-fixes-updates-and-advisories"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-47048", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-24T19:08:29.784020Z"}}}, {"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-25T16:10:41.543Z"}}]}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2024-47048 (string)

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

dateUpdated : 2025-03-25T16:10:41.543Z (string)

dateReserved : 2024-09-17T00:00:00.000Z (string)

datePublished : 2024-09-24T00:00:00.000Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

dateUpdated : 2024-09-24T18:40:04.048Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier allows stored XSS in the description and release notes of the marketplace and private apps. (string)

}

]

affected : [ »

0 : { »

vendor : n/a (string)

product : n/a (string)

versions : [ »

0 : { »

version : n/a (string)

status : affected (string)

}

]

}

]

references : [ »

0 : { »

url : https://github.com/RocketChat/Rocket.Chat/pull/33246 (string)

}

1 : { »

url : https://docs.rocket.chat/docs/rocketchat-security-fixes-updates-and-advisories (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : text (string)

lang : en (string)

description : n/a (string)

}

]

}

]

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-47048 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-09-24T19:08:29.784020Z (string)

}

1 : { »

cvssV3_1 : { »

scope : CHANGED (string)

version : 3.1 (string)

baseScore : 5.4 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N (string)

integrityImpact : LOW (string)

userInteraction : REQUIRED (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : LOW (string)

confidentialityImpact : LOW (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-79 (string)

description : CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (string)

}

]

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-03-25T16:10:41.543Z (string)

}

]

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-47048", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-24T19:08:29.784020Z"}}}, {"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-24T19:08:35.369Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://github.com/RocketChat/Rocket.Chat/pull/33246"}, {"url": "https://docs.rocket.chat/docs/rocketchat-security-fixes-updates-and-advisories"}], "descriptions": [{"lang": "en", "value": "Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier allows stored XSS in the description and release notes of the marketplace and private apps."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-09-24T18:40:04.048Z"}}}, "cveMetadata": {"cveId": "CVE-2024-47048", "state": "PUBLISHED", "dateUpdated": "2025-03-25T16:10:41.543Z", "dateReserved": "2024-09-17T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2024-09-24T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-47048 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-09-24T19:08:29.784020Z (string)

}

1 : { »

cvssV3_1 : { »

scope : CHANGED (string)

version : 3.1 (string)

baseScore : 5.4 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N (string)

integrityImpact : LOW (string)

userInteraction : REQUIRED (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : LOW (string)

confidentialityImpact : LOW (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-79 (string)

description : CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (string)

}

]

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-09-24T19:08:35.369Z (string)

}

]

cna : { »

affected : [ »

0 : { »

vendor : n/a (string)

product : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

references : [ »

0 : { »

url : https://github.com/RocketChat/Rocket.Chat/pull/33246 (string)

}

1 : { »

url : https://docs.rocket.chat/docs/rocketchat-security-fixes-updates-and-advisories (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier allows stored XSS in the description and release notes of the marketplace and private apps. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : text (string)

description : n/a (string)

}

]

}

]

providerMetadata : { »

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

dateUpdated : 2024-09-24T18:40:04.048Z (string)

}

cveMetadata : { »

cveId : CVE-2024-47048 (string)

state : PUBLISHED (string)

dateUpdated : 2025-03-25T16:10:41.543Z (string)

dateReserved : 2024-09-17T00:00:00.000Z (string)

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

datePublished : 2024-09-24T00:00:00.000Z (string)

assignerShortName : mitre (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*", "matchCriteriaId": "D9B9DDD7-5E79-488F-BD2F-9B7EEBF7EC46", "versionEndExcluding": "6.7.9", "vulnerable": true}, {"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*", "matchCriteriaId": "842262D3-74EF-490E-B0DC-4DC0A0B185AA", "versionEndExcluding": "6.8.7", "versionStartIncluding": "6.8.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*", "matchCriteriaId": "702723D8-57FB-402E-A6B7-39907F865998", "versionEndExcluding": "6.9.7", "versionStartIncluding": "6.9.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*", "matchCriteriaId": "C84DFE29-F5DE-411B-82B7-24DDBCD82CFF", "versionEndExcluding": "6.10.6", "versionStartIncluding": "6.10.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*", "matchCriteriaId": "5668FE7A-694F-4E18-960C-D2BFEC6890DF", "versionEndExcluding": "6.11.3", "versionStartIncluding": "6.11.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:-:*:*:*:*:*:*", "matchCriteriaId": "E57EDBB1-FF16-4A24-AED2-90D61FB47CE4", "vulnerable": true}, {"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "48C71A14-5A84-4CBD-BA42-07DE1EB5A320", "vulnerable": true}, {"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "403EB714-366A-4783-8547-00E4A3F4BF40", "vulnerable": true}, {"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "526F1CDD-BCD2-457E-A165-13ABE499F1EC", "vulnerable": true}, {"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc4:*:*:*:*:*:*", "matchCriteriaId": "8DA3467D-B02C-4FA0-BE26-071FB1560183", "vulnerable": true}, {"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc5:*:*:*:*:*:*", "matchCriteriaId": "EAE65E7F-2D5B-4B26-A089-F0E4B5C72E24", "vulnerable": true}, {"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc6:*:*:*:*:*:*", "matchCriteriaId": "E74704CE-0BCF-440D-9087-5B5D66DD0B01", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier allows stored XSS in the description and release notes of the marketplace and private apps."}, {"lang": "es", "value": "Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8 y versiones anteriores permiten XSS almacenado en la descripci\u00f3n y notas de lanzamiento del mercado y aplicaciones privadas."}], "id": "CVE-2024-47048", "lastModified": "2025-03-25T17:16:11.327", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 2.7, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-09-25T01:15:44.810", "references": [{"source": "cve@mitre.org", "tags": ["Release Notes"], "url": "https://docs.rocket.chat/docs/rocketchat-security-fixes-updates-and-advisories"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "https://github.com/RocketChat/Rocket.Chat/pull/33246"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-79"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:* (string)

matchCriteriaId : D9B9DDD7-5E79-488F-BD2F-9B7EEBF7EC46 (string)

versionEndExcluding : 6.7.9 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 842262D3-74EF-490E-B0DC-4DC0A0B185AA (string)

versionEndExcluding : 6.8.7 (string)

versionStartIncluding : 6.8.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 702723D8-57FB-402E-A6B7-39907F865998 (string)

versionEndExcluding : 6.9.7 (string)

versionStartIncluding : 6.9.0 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:* (string)

matchCriteriaId : C84DFE29-F5DE-411B-82B7-24DDBCD82CFF (string)

versionEndExcluding : 6.10.6 (string)

versionStartIncluding : 6.10.0 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 5668FE7A-694F-4E18-960C-D2BFEC6890DF (string)

versionEndExcluding : 6.11.3 (string)

versionStartIncluding : 6.11.0 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:-:*:*:*:*:*:* (string)

matchCriteriaId : E57EDBB1-FF16-4A24-AED2-90D61FB47CE4 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc1:*:*:*:*:*:* (string)

matchCriteriaId : 48C71A14-5A84-4CBD-BA42-07DE1EB5A320 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc2:*:*:*:*:*:* (string)

matchCriteriaId : 403EB714-366A-4783-8547-00E4A3F4BF40 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc3:*:*:*:*:*:* (string)

matchCriteriaId : 526F1CDD-BCD2-457E-A165-13ABE499F1EC (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc4:*:*:*:*:*:* (string)

matchCriteriaId : 8DA3467D-B02C-4FA0-BE26-071FB1560183 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc5:*:*:*:*:*:* (string)

matchCriteriaId : EAE65E7F-2D5B-4B26-A089-F0E4B5C72E24 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc6:*:*:*:*:*:* (string)

matchCriteriaId : E74704CE-0BCF-440D-9087-5B5D66DD0B01 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier allows stored XSS in the description and release notes of the marketplace and private apps. (string)

}

1 : { »

lang : es (string)

value : Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8 y versiones anteriores permiten XSS almacenado en la descripción y notas de lanzamiento del mercado y aplicaciones privadas. (string)

}

]

id : CVE-2024-47048 (string)

lastModified : 2025-03-25T17:16:11.327 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 5.4 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : LOW (string)

scope : CHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.3 (number)

impactScore : 2.7 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 5.4 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : LOW (string)

scope : CHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.3 (number)

impactScore : 2.7 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2024-09-25T01:15:44.810 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Release Notes (string)

]

url : https://docs.rocket.chat/docs/rocketchat-security-fixes-updates-and-advisories (string)

}

1 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Patch (string)

]

url : https://github.com/RocketChat/Rocket.Chat/pull/33246 (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-79 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-79 (string)

}

]

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object