CVE-2021-22910

CRITICAL · CVSS 9.8 EPSS 2.27%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-08-09 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-22910

Severity

CRITICAL

CVSS

9.8

EPSS

2.27%

Original NVD Description

A sanitization vulnerability exists in Rocket.Chat server versions <3.13.2, <3.12.4, <3.11.4 that allowed queries to an endpoint which could result in a NoSQL injection, potentially leading to RCE.