← All advisories

High severityNVD Advisory· Published Aug 5, 2024· Updated Sep 6, 2024

CVE-2024-39713

CVE-2024-39713

Description

A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
rocket.chatnpm	< 6.10.1	6.10.1

Affected products

2

ghsa-coords
pkg:npm/rocket.chat
Range: < 6.10.1
RocketChat/Rocket.chatv5
Range: 6.10.1

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-ffxg-5f8m-h72jghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-39713ghsaADVISORY
github.com/RocketChat/Rocket.Chat/commit/ce072a1a70c86f90a4f502cdc0bad92d79f6e6e9ghsaWEB
hackerone.com/reports/1886954ghsaWEB

News mentions

0

No linked articles in our index yet.