← Database

CVE-2023-23911

HIGH CVSS: 7.5 Published: 2023-03-10 Modified: 2026-06-17

Description

An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption of a chat room by a user changing the group key of a chat room.

Affected Platforms

Rocket.Chat Rocket.Chat

Weakness Type

CWE-284, CWE-326

References