Enhancement: vulnerabilities/rocketchat/unauth-message-read.yaml by mp

vulnerabilities/rocketchat/unauth-message-read.yaml

@@ -1,12 +1,17 @@
 id: rocketchat-unauth-access
 
 info:
-  name: RocketChat Unauthenticated Read Access
+  name: RocketChat - Unauthenticated Read Access
   author: rojanrijal
-  severity: critical
-  description: An issue with the Live Chat accepting invalid parameters could potentially allow unauthenticated access to messages and user tokens.
+  severity: medium
+  description: RocketChat Live Chat accepts invalid parameters that could potentially allow unauthenticated access to messages and user tokens.
   reference:
     - https://docs.rocket.chat/guides/security/security-updates
+  classification:
+    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
+    cvss-score: 5.8
+    cve-id:
+    cwe-id: CWE-522
   tags: rocketchat,unauth
 
 requests:
@@ -39,3 +44,5 @@ requests:
           - '"success":true'
         part: body
         condition: and
+
+# Enhanced by mp on 2022/06/03