CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It involves a SQL injection risk.
CVE
CVE-2021-22910
Severity
CRITICAL
CVSS
9.8
EPSS
2.27%
Original NVD Description
A sanitization vulnerability exists in Rocket.Chat server versions <3.13.2, <3.12.4, <3.11.4 that allowed queries to an endpoint which could result in a NoSQL injection, potentially leading to RCE.
Related CVEs
Other vulnerabilities affecting the same vendor(s)