CyberRota Analysis
AI analysis pending.
CVE
CVE-2022-35249
Severity
MEDIUM
CVSS
4.3
EPSS
0.66%
Original NVD Description
A information disclosure vulnerability exists in Rocket.Chat <v5 where the getUserMentionsByChannel meteor server method discloses messages from private channels and direct messages regardless of the users access permission to the room.