high8.6
CVE-2024-39713
Rocket.Chat Server-Side Request Forgery (SSRF) vulnerability
Impact
A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | rocket.chat | < 6.10.1 | 6.10.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rocket.Chat | Rocket.Chat | before 6.10.1 |