Priority LOW 37
Rocket.Chat exposes the sendForgotPasswordEmail Meteor method without a DDP rate limit, so an unauthenticated caller may invoke it as often as it likes.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00397 · Published 2026-08-25 · Fixed in 7.10.15, 8.1.8 +7 CWE-204
Priority LOW 20
Rocket.Chat is an open-source, secure, fully customizable communications platform.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00325 · Published 2026-08-10 · Fixed in 7.10.14, 8.0.8 +6 CWE-862
Priority LOW 24
Rocket.Chat is an open-source, secure, fully customizable communications platform.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00225 · Published 2026-08-10 · Fixed in 7.10.14, 8.0.8 +6 CWE-862
Priority LOW 38
Rocket.Chat is an open-source, secure, fully customizable communications platform.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00474 · Published 2026-06-24 · Fixed in 8.5.1, 8.4.4 +5 CWE-862
Priority LOW 34
Rocket.Chat is an open-source, secure, fully customizable communications platform.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00323 · Published 2026-06-24 · Fixed in 8.5.1, 8.4.4 +5 CWE-287
Priority MEDIUM 48
Rocket.Chat is an open-source, secure, fully customizable communications platform.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00406 · Published 2026-06-24 · Fixed in 8.5.1, 8.4.4 +5 CWE-287
Priority LOW 32
Rocket.Chat is an open-source, secure, fully customizable communications platform.
CVSS 3.1MEDIUM 6.7· Network · High privileges · No interaction · EPSS 0.00414 · Published 2026-06-24 · Fixed in 8.5.0, 8.4.2 +6 CWE-285
Priority LOW 12
Rocket.Chat is an open-source, secure, fully customizable communications platform.
CVSS 4.0LOW 2.3· Network · No auth · User interaction · EPSS 0.00314 · Published 2026-06-24 · Fixed in 8.5.0, 8.4.2 +6 CWE-613
Priority MEDIUM 45
Rocket.Chat is an open-source, secure, fully customizable communications platform.
CVSS 4.0LOW 2.3· Network · No auth · User interaction · EPSS 0.0027 · Published 2026-06-24 · Fixed in 8.5.0, 8.4.2 +6 CWE-613
Priority MEDIUM 47
Rocket.Chat is an open-source, secure, fully customizable communications platform.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00221 · Published 2026-06-24 · Fixed in 8.5.0, 8.4.1 +6 CWE-347
Priority HIGH 74
Rocket.Chat is an open-source, secure, fully customizable communications platform.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00526 · Published 2026-06-24 · Fixed in 8.5.0, 8.4.1 +6 CWE-943
Priority HIGH 80
Rocket.Chat is an open-source, secure, fully customizable communications platform.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00493 · Published 2026-06-24 · Fixed in 8.5.0, 8.4.1 +6 CWE-943
Priority LOW 37
Rocket.Chat is an open-source, secure, fully customizable communications platform.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00341 · Published 2026-06-24 · Fixed in 8.5.0, 8.4.1 +6 CWE-915
Priority MEDIUM 45
Rocket.Chat is an open-source, secure, fully customizable communications platform.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00683 · Published 2026-06-24 · Fixed in 8.5.0, 8.4.1 +6 CWE-862
Priority MEDIUM 54
Rocket.Chat is an open-source, secure, fully customizable communications platform.
CVSS 3.1MEDIUM 4.4· Network · Low privileges · User interaction · EPSS 0.00141 · Published 2026-06-24 · Fixed in 8.5.0 CWE-79
Priority LOW 36
Rocket.Chat is an open-source, secure, fully customizable communications platform.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00302 · Published 2026-03-06 · Fixed in 7.10.8, 7.11.5 +5 CWE-943
Priority MEDIUM 43
Rocket.Chat is an open-source, secure, fully customizable communications platform.
CVSS 4.0HIGH 8.0· Network · No auth · No interaction · EPSS 0.00379 · Published 2026-03-06 · Fixed in 7.10.8, 7.11.5 +5 CWE-287
Priority MEDIUM 49
Rocket.Chat is an open-source, secure, fully customizable communications platform.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00553 · Published 2026-03-06 · Fixed in 7.8.6, 7.9.8 +5 CWE-287
Priority HIGH 67
Rocket.Chat is an open-source, secure, fully customizable communications platform.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00356 · Published 2026-01-14 · Fixed in 6.12.0 CWE-269
Priority LOW 32
Rocket.Chat is an open-source fully customizable communications platform developed in JavaScript.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0162 · Published 2021-08-30 · Fixed in 3.11.3 CWE-400
Priority LOW 28
Rocket.Chat version 0.8.0 and newer is vulnerable to XSS in the markdown link parsing code for messages.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00726 · Published 2017-07-13 · No fix listed CWE-79
THREATIST.IORead the docs