mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 09:11:28 +00:00
151 lines
5.0 KiB
JSON
151 lines
5.0 KiB
JSON
{
|
|
"id": "CVE-2024-47048",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2024-09-25T01:15:44.810",
|
|
"lastModified": "2024-09-26T17:12:07.440",
|
|
"vulnStatus": "Analyzed",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier allows stored XSS in the description and release notes of the marketplace and private apps."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8 y versiones anteriores permiten XSS almacenado en la descripci\u00f3n y notas de lanzamiento del mercado y aplicaciones privadas."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV31": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
|
|
"attackVector": "NETWORK",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "LOW",
|
|
"userInteraction": "REQUIRED",
|
|
"scope": "CHANGED",
|
|
"confidentialityImpact": "LOW",
|
|
"integrityImpact": "LOW",
|
|
"availabilityImpact": "NONE",
|
|
"baseScore": 5.4,
|
|
"baseSeverity": "MEDIUM"
|
|
},
|
|
"exploitabilityScore": 2.3,
|
|
"impactScore": 2.7
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-79"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "6.7.9",
|
|
"matchCriteriaId": "D9B9DDD7-5E79-488F-BD2F-9B7EEBF7EC46"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "6.8.0",
|
|
"versionEndExcluding": "6.8.7",
|
|
"matchCriteriaId": "842262D3-74EF-490E-B0DC-4DC0A0B185AA"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "6.9.0",
|
|
"versionEndExcluding": "6.9.7",
|
|
"matchCriteriaId": "702723D8-57FB-402E-A6B7-39907F865998"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "6.10.0",
|
|
"versionEndExcluding": "6.10.6",
|
|
"matchCriteriaId": "C84DFE29-F5DE-411B-82B7-24DDBCD82CFF"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "6.11.0",
|
|
"versionEndExcluding": "6.11.3",
|
|
"matchCriteriaId": "5668FE7A-694F-4E18-960C-D2BFEC6890DF"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:-:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E57EDBB1-FF16-4A24-AED2-90D61FB47CE4"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc1:*:*:*:*:*:*",
|
|
"matchCriteriaId": "48C71A14-5A84-4CBD-BA42-07DE1EB5A320"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc2:*:*:*:*:*:*",
|
|
"matchCriteriaId": "403EB714-366A-4783-8547-00E4A3F4BF40"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc3:*:*:*:*:*:*",
|
|
"matchCriteriaId": "526F1CDD-BCD2-457E-A165-13ABE499F1EC"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc4:*:*:*:*:*:*",
|
|
"matchCriteriaId": "8DA3467D-B02C-4FA0-BE26-071FB1560183"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc5:*:*:*:*:*:*",
|
|
"matchCriteriaId": "EAE65E7F-2D5B-4B26-A089-F0E4B5C72E24"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:rocket.chat:rocket.chat:6.12.0:rc6:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E74704CE-0BCF-440D-9087-5B5D66DD0B01"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://docs.rocket.chat/docs/rocketchat-security-fixes-updates-and-advisories",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Release Notes"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://github.com/RocketChat/Rocket.Chat/pull/33246",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Patch"
|
|
]
|
|
}
|
|
]
|
|
} |