Site icon API Security Blog

Rocket.Chat log information leakage vulnerability

Chat is a set of open source team chat software. Rocket.Chat v4.6.4 and earlier versions contain an information disclosure vulnerability, which stems from OAuth tokens being leaked in plaintext in the logs. An attacker could use this vulnerability to obtain sensitive information.Read More

Exit mobile version