CVE-2024-45621

Published: 2024-09-02T19:15Z

Last Modified: 2025-03-13T21:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The Electron desktop application of Rocket.Chat through 6.3.4 allows stored XSS via links in an uploaded file, related to failure to use a separate browser upon encountering third-party external actions from PDF documents. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt