medium6.1
CVE-2017-1000054
Rocket.Chat version 0.8.0 and newer is vulnerable to XSS in the markdown link parsing code for messages.
Impact
Rocket.Chat version 0.8.0 and newer is vulnerable to XSS in the markdown link parsing code for messages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rocketchat | Rocket.Chat | Versions 0.8.0, 0.9.0, 0.10.0, 0.10.1, 0.10.2, 0.11.0 |