Skip to content
OpenAdvisories
Medium · 4.3 CVE-2021-32832 EUVD-2021-19570GHSA-wpp8-mvvg-33rx

ReDOS in Rocket.Chat

Published Aug 30, 2021 · Updated Aug 3, 2024 · Assigned by GitHub_M

Description

Rocket.Chat is an open-source fully customizable communications platform developed in JavaScript. In Rocket.Chat before versions 3.11.3, 3.12.2, and 3.13 an issue with certain regular expressions could lead potentially to Denial of Service. This was fixed in versions 3.11.3, 3.12.2, and 3.13.

Affected products

VendorProductAffectedFixed
RocketChat Rocket.Chat < 3.11.3 —

References