GHSA-ffxg-5f8m-h72j

ghsaUSosv

Rocket.Chat Server-Side Request Forgery (SSRF) vulnerability

view advisory published 2024-08-05Licence: CC-BY-4.0

A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-39713US	high8.6	3.20% (88th)	Exploit	2024-08-05
A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.