CVE-2024-45621
The Electron desktop application of Rocket.Chat through 6.3.4 allows stored XSS via links in an uploaded file, related to failure to use a separate browser upon encountering thi…
Published: 2024-09-02 · CVSS: 5.4 · CVSS 3.1
The Electron desktop application of Rocket.Chat through 6.3.4 allows stored XSS via links in an uploaded file, related to failure to use a separate browser upon encountering third-party external actions from PDF documents.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7