CVE-2022-35250

A privilege escalation vulnerability exists in Rocket.chat

Original description

The description as published by the source.

A privilege escalation vulnerability exists in Rocket.chat <v5 which made it possible to elevate privileges for any authenticated user to view Direct messages without appropriate permissions.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web hackerone.com