CVE-2023-23911

Published: Mar 10, 2023

Modified: Feb 28, 2025

PUBLISHED

Description

An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption of a chat room by a user changing the group key of a chat room.

Vendor	Product	Versions
n/a	Rocket.Chat	affected `fixed version => 6.0`

Weaknesses (CWE)

CWE-284

References

https://hackerone.com/reports/1757663

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2023-23911

Description

Affected Products

Weaknesses (CWE)

References