VYPR
← All advisories
Medium severity5.3NVD Advisory· Published May 9, 2023· Updated Jun 17, 2026

CVE-2023-28318

CVE-2023-28318

Description

A vulnerability has been discovered in Rocket.Chat, where messages can be hidden regardless of the Message_KeepHistory or Message_ShowDeletedStatus server configuration. This allows users to bypass the intended message deletion behavior, hiding messages and deletion notices.

Affected products

3
  • RocketChat/Rocket.chatinferred3 versions
    (expand)+ 2 more
    • (no CPE)
    • cpe:2.3:a:rocket.chat:rocket.chat:-:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.