← All advisories

High severity8.6NVD Advisory· Published Aug 5, 2024· Updated Jun 17, 2026

CVE-2024-39713

CVE-2024-39713

Description

A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
rocket.chatnpm	< 6.10.1	6.10.1

Affected products

3

RocketChat/Rocket.chat2 versions
cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*range: <6.10.1
- (no CPE)range: 6.10.1
ghsa-coords
pkg:npm/rocket.chat
Range: < 6.10.1

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-ffxg-5f8m-h72jghsaADVISORY
hackerone.com/reports/1886954nvdIssue TrackingThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2024-39713ghsaADVISORY
github.com/RocketChat/Rocket.Chat/commit/ce072a1a70c86f90a4f502cdc0bad92d79f6e6e9ghsaWEB

News mentions

0

No linked articles in our index yet.