Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-35247

A information disclosure vulnerability exists in Rocket.chat <v5, <v4.8.2 and <v4.7.5 where the lack of ACL checks in the getRoomRoles Meteor method leak channel members with special roles to unauthorized clients.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.9%
CVSS Severity
CVSS v3 Score 4.3
Products affected by CVE-2022-35247


Contact Us

Shodan ® - All rights reserved