CVE-2017-1000054
N/A
Published: July 13, 2017 at 08:00 PM UTC
Updated: June 17, 2026 at 12:58 AM UTC
1 product affected across 1 vendorChat Rocket Chat
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.7%
Description
Rocket.Chat version 0.8.0 and newer is vulnerable to XSS in the markdown link parsing code for messages.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
0.10.00.10.10.10.20.11.00.12.00.12.10.13.00.14.00.15.00.16.00.17.00.18.00.18.10.19.00.20.00.21.00.22.00.23.00.24.00.25.00.26.00.27.00.28.00.29.00.30.00.31.00.32.00.33.00.34.00.35.00.36.00.37.00.37.10.38.00.39.00.40.10.41.00.42.00.43.00.44.00.45.00.46.00.47.00.47.10.48.00.48.10.48.20.49.00.49.10.49.20.49.30.49.40.50.00.50.10.51.00.52.00.53.00.54.00.54.10.54.20.55.00.55.10.56.00.57.00.57.0 rc00.57.0 rc10.57.0 rc20.57.0 rc30.57.10.57.20.8.00.9.0
Remediation
No guide yetNo remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.
References (1)
x_refsource_MISCBroken LinkURL Repurposed
Source: [email protected]
https://www.theblazehen.com/posts/CVE-2017-xxxxxx-rocketchat-xss-with-markdown-url-handling-in-messages/Quick Info
StatusMODIFIED
CWE
CWE-79
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card