medium4.3
CVE-2021-32832
Rocket.Chat is an open-source fully customizable communications platform developed in JavaScript.
Impact
Rocket.Chat is an open-source fully customizable communications platform developed in JavaScript. In Rocket.Chat before versions 3.11.3, 3.12.2, and 3.13 an issue with certain regular expressions could lead potentially to Denial of Service. This was fixed in versions 3.11.3, 3.12.2, and 3.13.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rocket.Chat | Rocket.Chat | before 3.11.3 from 3.12.0 before 3.12.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.rocket.chat/guides/security/security-updates
- https://github.com/RocketChat/Rocket.Chat/commit/4a0dce973e37ec3f56ca2231d6030511dbdd094c
- https://github.com/RocketChat/Rocket.Chat/releases/tag/3.11.3
- https://securitylab.github.com/advisories/GHSL-2020-310-redos-Rocket.Chat/
- https://docs.rocket.chat/guides/security/security-updates
- https://github.com/RocketChat/Rocket.Chat/commit/4a0dce973e37ec3f56ca2231d6030511dbdd094c
- https://github.com/RocketChat/Rocket.Chat/releases/tag/3.11.3
- https://securitylab.github.com/advisories/GHSL-2020-310-redos-Rocket.Chat/