Read the docs
TI-2017-14395 Aliases CVE-2017-1000054GHSA-82mg-vfjx-xjvw

Rocket.Chat version 0.8.0 and newer is vulnerable to XSS in the markdown link parsing code for messages.

Priority LOW 28CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

Rocket.Chat version 0.8.0 and newer is vulnerable to XSS in the markdown link parsing code for messages.

Why it matters now

EPSS 0.00726 54th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 72

CPEVersionsRoleVendor
cpe:2.3:a:rocketchat:rocket.chat:0.8.0:*:*:*:*:*:*:*0.8.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.9.0:*:*:*:*:*:*:*0.9.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.10.0:*:*:*:*:*:*:*0.10.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.10.1:*:*:*:*:*:*:*0.10.1VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.10.2:*:*:*:*:*:*:*0.10.2VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.11.0:*:*:*:*:*:*:*0.11.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.12.0:*:*:*:*:*:*:*0.12.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.12.1:*:*:*:*:*:*:*0.12.1VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.13.0:*:*:*:*:*:*:*0.13.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.14.0:*:*:*:*:*:*:*0.14.0VulnerableRocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.8.0:*:*:*:*:*:*:* Versions 0.8.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.9.0:*:*:*:*:*:*:* Versions 0.9.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.10.0:*:*:*:*:*:*:* Versions 0.10.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.10.1:*:*:*:*:*:*:* Versions 0.10.1 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.10.2:*:*:*:*:*:*:* Versions 0.10.2 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.11.0:*:*:*:*:*:*:* Versions 0.11.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.12.0:*:*:*:*:*:*:* Versions 0.12.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.12.1:*:*:*:*:*:*:* Versions 0.12.1 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.13.0:*:*:*:*:*:*:* Versions 0.13.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.14.0:*:*:*:*:*:*:* Versions 0.14.0 Vulnerable ·RocketChat
Show 62 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:rocketchat:rocket.chat:0.15.0:*:*:*:*:*:*:*0.15.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.16.0:*:*:*:*:*:*:*0.16.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.17.0:*:*:*:*:*:*:*0.17.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.18.0:*:*:*:*:*:*:*0.18.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.18.1:*:*:*:*:*:*:*0.18.1VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.19.0:*:*:*:*:*:*:*0.19.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.20.0:*:*:*:*:*:*:*0.20.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.21.0:*:*:*:*:*:*:*0.21.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.22.0:*:*:*:*:*:*:*0.22.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.23.0:*:*:*:*:*:*:*0.23.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.24.0:*:*:*:*:*:*:*0.24.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.25.0:*:*:*:*:*:*:*0.25.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.26.0:*:*:*:*:*:*:*0.26.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.27.0:*:*:*:*:*:*:*0.27.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.28.0:*:*:*:*:*:*:*0.28.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.29.0:*:*:*:*:*:*:*0.29.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.30.0:*:*:*:*:*:*:*0.30.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.31.0:*:*:*:*:*:*:*0.31.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.32.0:*:*:*:*:*:*:*0.32.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.33.0:*:*:*:*:*:*:*0.33.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.34.0:*:*:*:*:*:*:*0.34.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.35.0:*:*:*:*:*:*:*0.35.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.36.0:*:*:*:*:*:*:*0.36.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.37.0:*:*:*:*:*:*:*0.37.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.37.1:*:*:*:*:*:*:*0.37.1VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.38.0:*:*:*:*:*:*:*0.38.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.39.0:*:*:*:*:*:*:*0.39.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.40.1:*:*:*:*:*:*:*0.40.1VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.41.0:*:*:*:*:*:*:*0.41.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.42.0:*:*:*:*:*:*:*0.42.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.43.0:*:*:*:*:*:*:*0.43.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.44.0:*:*:*:*:*:*:*0.44.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.45.0:*:*:*:*:*:*:*0.45.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.46.0:*:*:*:*:*:*:*0.46.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.47.0:*:*:*:*:*:*:*0.47.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.47.1:*:*:*:*:*:*:*0.47.1VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.48.0:*:*:*:*:*:*:*0.48.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.48.1:*:*:*:*:*:*:*0.48.1VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.48.2:*:*:*:*:*:*:*0.48.2VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.49.0:*:*:*:*:*:*:*0.49.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.49.1:*:*:*:*:*:*:*0.49.1VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.49.2:*:*:*:*:*:*:*0.49.2VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.49.3:*:*:*:*:*:*:*0.49.3VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.49.4:*:*:*:*:*:*:*0.49.4VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.50.0:*:*:*:*:*:*:*0.50.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.50.1:*:*:*:*:*:*:*0.50.1VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.51.0:*:*:*:*:*:*:*0.51.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.52.0:*:*:*:*:*:*:*0.52.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.53.0:*:*:*:*:*:*:*0.53.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.54.0:*:*:*:*:*:*:*0.54.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.54.1:*:*:*:*:*:*:*0.54.1VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.54.2:*:*:*:*:*:*:*0.54.2VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.55.0:*:*:*:*:*:*:*0.55.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.55.1:*:*:*:*:*:*:*0.55.1VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.56.0:*:*:*:*:*:*:*0.56.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.57.0:*:*:*:*:*:*:*0.57.0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.57.0:rc0:*:*:*:*:*:*0.57.0 rc0VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.57.0:rc1:*:*:*:*:*:*0.57.0 rc1VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.57.0:rc2:*:*:*:*:*:*0.57.0 rc2VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.57.0:rc3:*:*:*:*:*:*0.57.0 rc3VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.57.1:*:*:*:*:*:*:*0.57.1VulnerableRocketChat
cpe:2.3:a:rocketchat:rocket.chat:0.57.2:*:*:*:*:*:*:*0.57.2VulnerableRocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.15.0:*:*:*:*:*:*:* Versions 0.15.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.16.0:*:*:*:*:*:*:* Versions 0.16.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.17.0:*:*:*:*:*:*:* Versions 0.17.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.18.0:*:*:*:*:*:*:* Versions 0.18.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.18.1:*:*:*:*:*:*:* Versions 0.18.1 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.19.0:*:*:*:*:*:*:* Versions 0.19.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.20.0:*:*:*:*:*:*:* Versions 0.20.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.21.0:*:*:*:*:*:*:* Versions 0.21.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.22.0:*:*:*:*:*:*:* Versions 0.22.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.23.0:*:*:*:*:*:*:* Versions 0.23.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.24.0:*:*:*:*:*:*:* Versions 0.24.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.25.0:*:*:*:*:*:*:* Versions 0.25.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.26.0:*:*:*:*:*:*:* Versions 0.26.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.27.0:*:*:*:*:*:*:* Versions 0.27.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.28.0:*:*:*:*:*:*:* Versions 0.28.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.29.0:*:*:*:*:*:*:* Versions 0.29.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.30.0:*:*:*:*:*:*:* Versions 0.30.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.31.0:*:*:*:*:*:*:* Versions 0.31.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.32.0:*:*:*:*:*:*:* Versions 0.32.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.33.0:*:*:*:*:*:*:* Versions 0.33.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.34.0:*:*:*:*:*:*:* Versions 0.34.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.35.0:*:*:*:*:*:*:* Versions 0.35.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.36.0:*:*:*:*:*:*:* Versions 0.36.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.37.0:*:*:*:*:*:*:* Versions 0.37.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.37.1:*:*:*:*:*:*:* Versions 0.37.1 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.38.0:*:*:*:*:*:*:* Versions 0.38.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.39.0:*:*:*:*:*:*:* Versions 0.39.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.40.1:*:*:*:*:*:*:* Versions 0.40.1 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.41.0:*:*:*:*:*:*:* Versions 0.41.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.42.0:*:*:*:*:*:*:* Versions 0.42.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.43.0:*:*:*:*:*:*:* Versions 0.43.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.44.0:*:*:*:*:*:*:* Versions 0.44.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.45.0:*:*:*:*:*:*:* Versions 0.45.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.46.0:*:*:*:*:*:*:* Versions 0.46.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.47.0:*:*:*:*:*:*:* Versions 0.47.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.47.1:*:*:*:*:*:*:* Versions 0.47.1 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.48.0:*:*:*:*:*:*:* Versions 0.48.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.48.1:*:*:*:*:*:*:* Versions 0.48.1 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.48.2:*:*:*:*:*:*:* Versions 0.48.2 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.49.0:*:*:*:*:*:*:* Versions 0.49.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.49.1:*:*:*:*:*:*:* Versions 0.49.1 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.49.2:*:*:*:*:*:*:* Versions 0.49.2 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.49.3:*:*:*:*:*:*:* Versions 0.49.3 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.49.4:*:*:*:*:*:*:* Versions 0.49.4 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.50.0:*:*:*:*:*:*:* Versions 0.50.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.50.1:*:*:*:*:*:*:* Versions 0.50.1 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.51.0:*:*:*:*:*:*:* Versions 0.51.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.52.0:*:*:*:*:*:*:* Versions 0.52.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.53.0:*:*:*:*:*:*:* Versions 0.53.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.54.0:*:*:*:*:*:*:* Versions 0.54.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.54.1:*:*:*:*:*:*:* Versions 0.54.1 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.54.2:*:*:*:*:*:*:* Versions 0.54.2 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.55.0:*:*:*:*:*:*:* Versions 0.55.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.55.1:*:*:*:*:*:*:* Versions 0.55.1 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.56.0:*:*:*:*:*:*:* Versions 0.56.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.57.0:*:*:*:*:*:*:* Versions 0.57.0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.57.0:rc0:*:*:*:*:*:* Versions 0.57.0 rc0 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.57.0:rc1:*:*:*:*:*:* Versions 0.57.0 rc1 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.57.0:rc2:*:*:*:*:*:* Versions 0.57.0 rc2 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.57.0:rc3:*:*:*:*:*:* Versions 0.57.0 rc3 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.57.1:*:*:*:*:*:*:* Versions 0.57.1 Vulnerable ·RocketChat
  • cpe:2.3:a:rocketchat:rocket.chat:0.57.2:*:*:*:*:*:*:* Versions 0.57.2 Vulnerable ·RocketChat

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-1000054
  2. 2026-10-03 Alias added: GHSA-82mg-vfjx-xjvw

References

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences