CVE-2024-46935
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Sep 25, 2024
Updated: Sep 26, 2024
Summary
CVE-2024-46935 is a denial-of-service vulnerability affecting Rocket.Chat versions 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, and earlier. Maliciously crafted messages with specific characters can lead to a crash in the workspace due to an issue in the message parser, resulting in a denial-of-service condition for users in the affected Rocket.Chat instances. It is essential for administrators to apply patches or updates to mitigate this vulnerability and prevent potential disruptions.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.