description: A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenticated NoSQL injection, resulting potentially in RCE.
problem types: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) (CWE-75)
affected:
{
product: Rocket.Chat server
vendor: n/a
versions:
status: affected, version: Fixed in: 3.13.2, 3.12.4, 3.11.4
}