Description

A blind self XSS vulnerability exists in RocketChat LiveChat

Remediation

References

https://hackerone.com/reports/1091118

Related Vulnerabilities

CVE-2008-6681 Vulnerability in maven package org.apache.geronimo.plugins:dojo

CVE-2022-25875 Vulnerability in maven package org.webjars.npm:svelte

CVE-2019-10782 Vulnerability in maven package com.puppycrawl.tools:checkstyle

CVE-2023-29921 Vulnerability in maven package tech.powerjob:powerjob

CVE-2016-0711 Vulnerability in maven package org.apache.portals.jetspeed-2:j2-admin

Severity

High

Classification

CWE-79 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Exploit Third Party Advisory