DDP methods getThreadsList / getThreadMessages leaks private thread content to any authenticated low privilege user (unpatched sibling of #1446767)

SQL 注入 / NoSQL Injection / #3852135

厂商

Rocket.Chat

严重程度

中危

赏金

—

弱点

NoSQL Injection

研究员

@iamaangx028

披露日期

2026-08-20

资产

https://github.com/RocketChat/Rocket.Chat

CVE

CVE-2026-65645

该报告还没有中文解读。