CVE-2023-23911 | BDVDB-2026-197148 Detail
Rocket.Chat
Description#
An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption of a chat room by a user changing the group key of a chat room.
Impact#
No impact statement in the source data.
Weaknesses#
- CWE-284 Improper Access Control
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.