Vulnerability · Published Feb 23, 2023 · Assigned by hackerone
CVE-2023-23917
High 8.8
In plain English
A high-severity command injection in Rocket.chat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).
Official description
A prototype pollution vulnerability exists in Rocket.Chat server <5.2.0 that could allow an attacker to a RCE under the admin account. Any user can create their own server in your cloud and become an admin so this vulnerability could affect the cloud infrastructure. This attack vector also may increase the impact of XSS to RCE which is dangerous for self-hosted users as well.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Rocket.chat | Fixed Version => 5.2.0 |
Weakness: CWE-77, CWE-1321 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H