CVE-2024-46935

Published: Sep 25, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier is vulnerable to denial of service (DoS). Attackers who craft messages with specific characters may crash the workspace due to an issue in the message parser.

Affected (12)

Products: Rocket.chat: Rocket.chat

Rocket.chat

1 product

Rocket.chat

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Rocket.chat Rocket.chat	Before 6.7.9
Rocket.chat Rocket.chat	From 6.10.0 to 6.10.6
Rocket.chat Rocket.chat	From 6.11.0 to 6.11.3
Rocket.chat Rocket.chat	From 6.8.0 to 6.8.7
Rocket.chat Rocket.chat	From 6.9.0 to 6.9.7
Rocket.chat Rocket.chat	Version 6.12.0
Rocket.chat Rocket.chat	Version 6.12.0 rc1
Rocket.chat Rocket.chat	Version 6.12.0 rc2
Rocket.chat Rocket.chat	Version 6.12.0 rc3
Rocket.chat Rocket.chat	Version 6.12.0 rc4
Rocket.chat Rocket.chat	Version 6.12.0 rc5
Rocket.chat Rocket.chat	Version 6.12.0 rc6

References (2)

https://docs.rocket.chat/docs/rocketchat-security-fixes-updates-and-advisories

Source: cve@mitre.org

Release Notes

https://github.com/RocketChat/Rocket.Chat/pull/33227

Source: cve@mitre.org

Patch

Timeline

No history available yet.