PatchTheCVErocketchat vulnerabilities
Recent CVEs affecting rocketchat products. 1 tracked.
rocketchat has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-07-17. Highest priority: CVE-2017-1000054 (score 35/100).
- CVE-2017-1000054 MEDIUM 6.1 DOWNGRADE Rocket.Chat version 0.8.0 and newer is vulnerable to XSS in the markdown link parsing code for messages.
FAQ
How do I fix rocketchat vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rocketchat being exploited right now?
None of the tracked rocketchat CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rocketchat CVE should I patch first?
CVE-2017-1000054 currently ranks highest (35/100): Rocket.Chat version 0.8.0 and newer is vulnerable to XSS in the markdown link parsing code for messages..