VYPR
← All advisories
High severity7.5NVD Advisory· Published May 27, 2021· Updated Jun 17, 2026

CVE-2021-22892

CVE-2021-22892

Description

An information disclosure vulnerability exists in the Rocket.Chat server fixed v3.13, v3.12.2 & v3.11.3 that allowed email addresses to be disclosed by enumeration and validation checks.

Affected products

6
  • RocketChat/Rocket.chat5 versions
    cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*range: <3.11.3
    • cpe:2.3:a:rocket.chat:rocket.chat:3.12.3:*:*:*:*:*:*:*
    • cpe:2.3:a:rocket.chat:rocket.chat:3.12.4:*:*:*:*:*:*:*
    • cpe:2.3:a:rocket.chat:rocket.chat:3.12.5:*:*:*:*:*:*:*
    • (no CPE)
  • Rocket.Chat/Rocket.Chat serverdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.