What the vulnerability does

01Description

A vulnerability has been discovered in Rocket.Chat, where messages can be hidden regardless of the Message_KeepHistory or Message_ShowDeletedStatus server configuration. This allows users to bypass the intended message deletion behavior, hiding messages and deletion notices.

Key dates

02Disclosure timeline

May 9, 2023 CVE published
January 28, 2025 Record updated