← All advisories

Critical severity9.8OSV Advisory· Published Jan 3, 2018· Updated Jun 17, 2026

CVE-2017-1000493

CVE-2017-1000493

Description

Rocket.Chat Server version 0.59 and prior is vulnerable to a NoSQL injection leading to administrator account takeover

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

RocketChat/Rocket.chatOSV3 versions
0.10.0, 0.10.1, 0.10.2, …+ 2 more
- (no CPE)range: 0.10.0, 0.10.1, 0.10.2, …
- cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*range: <=0.59
- (no CPE)range: <=0.59

Patches

Vulnerability mechanics

References

2

github.com/RocketChat/Rocket.Chat/pull/8408nvdPatchThird Party Advisory
blog.sbarbeau.fr/2018/03/nosql-injection-leading-to.htmlnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.