← Database

CVE-2026-22560

MEDIUM CVSS: 5.3 Published: 2026-04-10 Modified: 2026-06-17

Description

An open redirect vulnerability in Rocket.Chat versions prior to 8.4.0 allows users to be redirected to arbitrary URLs by manipulating parameters within a SAML endpoint.

Affected Platforms

Rocket.Chat Rocket.Chat

Weakness Type

CWE-601

References