Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2021-32832

ReDOS in Rocket.Chat

Description

Rocket.Chat is an open-source fully customizable communications platform developed in JavaScript. In Rocket.Chat before versions 3.11.3, 3.12.2, and 3.13 an issue with certain regular expressions could lead potentially to Denial of Service. This was fixed in versions 3.11.3, 3.12.2, and 3.13.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

RocketChat Rocket.Chat

  • < 3.11.3affected

References