CVE-2021-22910

Published: 2021-08-09T13:15Z

Last Modified: 2024-11-21T05:50Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A sanitization vulnerability exists in Rocket.Chat server versions <3.13.2, <3.12.4, <3.11.4 that allowed queries to an endpoint which could result in a NoSQL injection, potentially leading to RCE. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt