GitHub Advisoryadvisory · npm

GHSA-ffxg-5f8m-h72j Rocket.Chat Server-Side Request Forgery (SSRF) vulnerability

HIGH Published 2024-08-05 Modified 2024-08-30 Official page ↗

Aliases: CVE-2024-39713
Ecosystem: npm
Packages: rocket.chat
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Weaknesses: CWE-918
Reviewed: 2024-08-05

Affected packages

• npm rocket.chat: < 6.10.1 → fixed in 6.10.1

Description

A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1.

Related

Alias · CVE (1)

CVE-2024-39713 A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1. vulnerability

Weakness · CWE (1)

CWE-918 Server-Side Request Forgery weakness

References