Description
Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability via the drag & drop functionality in message boxes.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Rocket.Chat server | Fixed in 3.9.0 | — |
Unscored
CVE-2020-8292
EUVD-2020-29160GHSA-388j-hgw2-75wf
Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability via the drag & drop functionality in messa…
Published Jan 21, 2021 · Updated Aug 4, 2024 · Assigned by hackerone