https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 15:12:33 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-06137 bdu:2022-06137 https://cve.radiocsirt.org/vuln/bdu:2022-06137 https://cve.radiocsirt.org/vuln/cnvd-2022-70581 cnvd-2022-70581 https://cve.radiocsirt.org/vuln/cnvd-2022-70581 https://cve.radiocsirt.org/vuln/euvd-2026-240993 EUVD-2026-240993 https://cve.radiocsirt.org/vuln/euvd-2026-240993 https://cve.radiocsirt.org/vuln/fkie_cve-2022-32226 <p>An improper access control vulnerability exists in Rocket.Chat &lt;v5, &lt;v4.8.2 and &lt;v4.7.5 due to input data in the getUsersOfRoom Meteor server method is not type validated, so that MongoDB query operator objects are accepted by the server, so that instead of a matching rid String a$regex query can be executed, bypassing the room access permission check for every but the first matching room.</p> <p>An improper access control vulnerability exists in Rocket.Chat &lt;v5, &lt;v4.8.2 and &lt;v4.7.5 due to input data in the getUsersOfRoom Meteor server method is not type validated, so that MongoDB query operator objects are accepted by the server, so that instead of a matching rid String a$regex query can be executed, bypassing the room access permission check for every but the first matching room.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-32226 https://cve.radiocsirt.org/vuln/ghsa-jx87-887q-554q <p>An improper access control vulnerability exists in Rocket.Chat &lt;v5, &lt;v4.8.2 and &lt;v4.7.5 due to input data in the getUsersOfRoom Meteor server method is not type validated, so that MongoDB query operator objects are accepted by the server, so that instead of a matching rid String a$regex query can be executed, bypassing the room access permission check for every but the first matching room.</p> <p>An improper access control vulnerability exists in Rocket.Chat &lt;v5, &lt;v4.8.2 and &lt;v4.7.5 due to input data in the getUsersOfRoom Meteor server method is not type validated, so that MongoDB query operator objects are accepted by the server, so that instead of a matching rid String a$regex query can be executed, bypassing the room access permission check for every but the first matching room.</p> https://cve.radiocsirt.org/vuln/ghsa-jx87-887q-554q https://cve.radiocsirt.org/vuln/gsd-2022-32226 gsd-2022-32226 https://cve.radiocsirt.org/vuln/gsd-2022-32226