What the vulnerability does

01Description

A information disclosure vulnerability exists in Rockert.Chat <v5 due to /api/v1/chat.getThreadsList lack of sanitization of user inputs and can therefore leak private thread messages to unauthorized users via Mongo DB injection.

Key dates

02Disclosure timeline

September 23, 2022 CVE published
May 22, 2025 Record updated