CVE-2022-32211

A SQL injection vulnerability exists in Rocket.Chat

Original description

The description as published by the source.

A SQL injection vulnerability exists in Rocket.Chat <v3.18.6, <v4.4.4 and <v4.7.3 which can allow an attacker to retrieve a reset password token through or a 2fa secret.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web hackerone.com

Metadata

CVE: CVE-2022-32211
Published: 2022-09-23
First seen on SecPulse: 4 years ago
First-seen source: OSV.dev (Open Source Vulnerabilities)

CWE

CWE-89

Detection sources

OSV.dev (Open Source Vulnerabilities) 2 months ago