← All advisories

Medium severity5.3OSV Advisory· Published Sep 23, 2022· Updated Jun 17, 2026

CVE-2022-32217

CVE-2022-32217

Description

A cleartext storage of sensitive information exists in Rocket.Chat <v4.6.4 due to Oauth token being leaked in plaintext in Rocket.chat logs.

Affected products

3

RocketChat/Rocket.chatOSV3 versions
0.10.0, 0.10.1, 0.10.2, …+ 2 more
- (no CPE)range: 0.10.0, 0.10.1, 0.10.2, …
- cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*range: <4.6.4
- (no CPE)range: <4.6.4

Patches

Vulnerability mechanics

References

1

hackerone.com/reports/1394399nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.