cve/2021/CVE-2021-22911.md

CVE-2021-22911

Description

A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenticated NoSQL injection, resulting potentially in RCE.

POC

Reference

• http://packetstormsecurity.com/files/162997/Rocket.Chat-3.12.1-NoSQL-Injection-Code-Execution.html
• http://packetstormsecurity.com/files/163419/Rocket.Chat-3.12.1-NoSQL-Injection-Code-Execution.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/ChrisPritchard/CVE-2021-22911-rust
• https://github.com/CsEnox/CVE-2021-22911
• https://github.com/MrDottt/CVE-2021-22911
• https://github.com/NaInSec/CVE-PoC-in-GitHub
• https://github.com/SYRTI/POC_to_review
• https://github.com/SleepwalkrX/Authenticated-RocketChat-3.12.1-Reverse-Shell
• https://github.com/Threekiii/Awesome-POC
• https://github.com/Threekiii/Vulhub-Reproduce
• https://github.com/WhooAmii/POC_to_review
• https://github.com/bakery312/Vulhub-Reproduce
• https://github.com/jayngng/CVE-2021-22911
• https://github.com/k0mi-tg/CVE-POC
• https://github.com/manas3c/CVE-POC
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/optionalCTF/Rocket.Chat-Automated-Account-Takeover-RCE-CVE-2021-22911
• https://github.com/overgrowncarrot1/CVE-2021-22911
• https://github.com/soosmile/POC
• https://github.com/trhacknon/Pocingit
• https://github.com/vlrhsgody/CVE-2021-22911
• https://github.com/whoforget/CVE-POC
• https://github.com/youwizard/CVE-POC
• https://github.com/zecool/cve