writeups.xyz / RocketChat - Unauthenticated access to messages

Submitter : c2a

Date: 1 March 2021

Bounty : undisclosed

Vulnerabilities :

• Broken Authorization

Programs :

• Rocket.Chat

Authors :

• Rojan Rijal (@Uraniumhacker)

Link :
https://securifyinc.com/disclosures/rocketchat-unauthenticated-access-to-messages