CVEvulnerability

CVE-2017-1000054

6.1 MEDIUM Published 2017-07-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-07-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Rocket.Chat version 0.8.0 and newer is vulnerable to XSS in the markdown link parsing code for messages.

Affected configurations

• rocketchat rocket.chat 0.8.0 • rocketchat rocket.chat 0.9.0 • rocketchat rocket.chat 0.10.0 • rocketchat rocket.chat 0.10.1 • rocketchat rocket.chat 0.10.2 • rocketchat rocket.chat 0.11.0 • rocketchat rocket.chat 0.12.0 • rocketchat rocket.chat 0.12.1 • rocketchat rocket.chat 0.13.0 • rocketchat rocket.chat 0.14.0 • rocketchat rocket.chat 0.15.0 • rocketchat rocket.chat 0.16.0 • rocketchat rocket.chat 0.17.0 • rocketchat rocket.chat 0.18.0 • rocketchat rocket.chat 0.18.1 • rocketchat rocket.chat 0.19.0 • rocketchat rocket.chat 0.20.0 • rocketchat rocket.chat 0.21.0 • rocketchat rocket.chat 0.22.0 • rocketchat rocket.chat 0.23.0 • rocketchat rocket.chat 0.24.0 • rocketchat rocket.chat 0.25.0 • rocketchat rocket.chat 0.26.0 • rocketchat rocket.chat 0.27.0 • rocketchat rocket.chat 0.28.0 • rocketchat rocket.chat 0.29.0 • rocketchat rocket.chat 0.30.0 • rocketchat rocket.chat 0.31.0 • rocketchat rocket.chat 0.32.0 • rocketchat rocket.chat 0.33.0 • rocketchat rocket.chat 0.34.0 • rocketchat rocket.chat 0.35.0 • rocketchat rocket.chat 0.36.0 • rocketchat rocket.chat 0.37.0 • rocketchat rocket.chat 0.37.1 • rocketchat rocket.chat 0.38.0 • rocketchat rocket.chat 0.39.0 • rocketchat rocket.chat 0.40.1 • rocketchat rocket.chat 0.41.0 • rocketchat rocket.chat 0.42.0 • rocketchat rocket.chat 0.43.0 • rocketchat rocket.chat 0.44.0 • rocketchat rocket.chat 0.45.0 • rocketchat rocket.chat 0.46.0 • rocketchat rocket.chat 0.47.0 • rocketchat rocket.chat 0.47.1 • rocketchat rocket.chat 0.48.0 • rocketchat rocket.chat 0.48.1 • rocketchat rocket.chat 0.48.2 • rocketchat rocket.chat 0.49.0 • rocketchat rocket.chat 0.49.1 • rocketchat rocket.chat 0.49.2 • rocketchat rocket.chat 0.49.3 • rocketchat rocket.chat 0.49.4 • rocketchat rocket.chat 0.50.0 • rocketchat rocket.chat 0.50.1 • rocketchat rocket.chat 0.51.0 • rocketchat rocket.chat 0.52.0 • rocketchat rocket.chat 0.53.0 • rocketchat rocket.chat 0.54.0 … and 8 more

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References