npm/rocket.chat CVE-2024-39713: high 8.6, EPSS 3.20%

Rocket.Chat Server-Side Request Forgery (SSRF) vulnerability

Action: Upgrade rocket.chat to 6.10.1 or later.

npm i rocket.chat@6.10.1

Affected

Fixed versions

Sources

• osv: GHSA-ffxg-5f8m-h72j
• https://nvd.nist.gov/vuln/detail/CVE-2024-39713
• https://github.com/RocketChat/Rocket.Chat/commit/ce072a1a70c86f90a4f502cdc0bad92d79f6e6e9
• https://hackerone.com/reports/1886954
• https://github.com/RocketChat/Rocket.Chat

CVE-2024-39713 · published 2024-08-05T06:30:36Z · modified 2024-08-30T19:56:58Z · JSON