diff --git a/vulnerabilities/rockethcat/unauth-message-read.yaml b/vulnerabilities/rockethcat/unauth-message-read.yaml index cd15678577..8b782186a1 100644 --- a/vulnerabilities/rockethcat/unauth-message-read.yaml +++ b/vulnerabilities/rockethcat/unauth-message-read.yaml @@ -1,8 +1,12 @@ id: rockethchat-unauth-access + info: name: RocketChat Unauthenticated Read Access author: rojanrijal severity: critical + description: An issue with the Live Chat accepting invalid parameters could potentially allow unauthenticated access to messages and user tokens. + reference: https://docs.rocket.chat/guides/security/security-updates + tags: rockethchat,unauth requests: - raw: @@ -38,5 +42,7 @@ requests: - 200 - type: word words: - - '\"result\":{\"messages\"' + - '"{\"msg\":\"result\",\"result\":{\"messages\"' + - '"success":true' part: body + condition: and \ No newline at end of file