CVE-2026-22560

An open redirect vulnerability in Rocket.Chat versions prior to 8.4.0 allows users to be redirected to arbitrary URLs by manipulating parameters withi...

Original description

The description as published by the source.

An open redirect vulnerability in Rocket.Chat versions prior to 8.4.0 allows users to be redirected to arbitrary URLs by manipulating parameters within a SAML endpoint.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
patch github.com
web hackerone.com

Metadata

CVE: CVE-2026-22560
Published: 2026-04-10
First seen on SecPulse: 6 months ago
First-seen source: OSV.dev (Open Source Vulnerabilities)

CWE

CWE-601

Detection sources

OSV.dev (Open Source Vulnerabilities) 2 months ago