high8.8
CVE-2022-32211
A SQL injection vulnerability exists in Rocket.Chat <v3.18.6, <v4.4.4 and <v4.7.3 which can allow an attacker to retrieve a reset password token through or a 2…
Impact
A SQL injection vulnerability exists in Rocket.Chat <v3.18.6, <v4.4.4 and <v4.7.3 which can allow an attacker to retrieve a reset password token through or a 2fa secret.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rocket.Chat | Rocket.Chat | before 3.18.6 from 4.0.0 before 4.4.4 from 4.7.0 before 4.7.3 |