cvedb.io
CVE-2023-28358
MEDIUM · CVSS 6.1
EPSS exploitation probability: 0%
Published 2023-05-11T22:15:09.993 · Last modified 2026-06-17T05:47:32.197

Summary

A vulnerability has been discovered in Rocket.Chat where a markdown parsing issue in the "Search Messages" feature allows the insertion of malicious tags. This can be exploited on servers with content security policy disabled possible leading to some issues attacks like account takeover.

Affected products

rocket.chat — rocket.chat

Does this affect you?

Add your gear to cvedb and we'll alert you only when rocket.chat ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.