← All advisories

Unrated severityOSV Advisory· Published Sep 23, 2022· Updated May 22, 2025

CVE-2022-32217

CVE-2022-32217

Description

A cleartext storage of sensitive information exists in Rocket.Chat <v4.6.4 due to Oauth token being leaked in plaintext in Rocket.chat logs.

Affected products

2

RocketChat/Rocket.chatOSV2 versions
0.10.0, 0.10.1, 0.10.2, …+ 1 more
- (no CPE)range: 0.10.0, 0.10.1, 0.10.2, …
- (no CPE)range: <4.6.4

Patches

Vulnerability mechanics

References

1

hackerone.com/reports/1394399mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.