Rocket.Chat quietly patches XSS vulnerability

Click the icon to Follow me:- twitterTelegramRedditDiscord

Posted by Moe Szyslak on Dec 18

Rocket.Chat has quietly fixed a stored XSS vulnerability in the following

Exploitation of this vulnerability is very straightforward by manipulating
a message attachment to contain a XSS payload either in the type or the

No release of Rocket.Chat…

If you like the site, please consider joining the telegram channel or supporting us on Patreon using the button below.


Original Source