Rocket.Chat · Report #1445810
Mute User can disclose private channel members to unauthorized users
Validstatus
mediumseverity
6upvotes
9 May 2023disclosed
Summary
A vulnerability has been identified in Rocket.Chat, where the ACL checks in the Slash Command /mute occur after checking whether a user is a member of a given channel, leaking private channel members to unauthorized users. This allows authenticated users to enumerate whether a username is a member of a channel that they do not have access to.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.