Rocket.Chat · Report #1461340
Maliciously crafted message can cause Rocket.Chat server to stop responding
Validstatus
mediumseverity
3upvotes
9 May 2023disclosed
Summary
A vulnerability has been identified where a maliciously crafted message containing a specific chain of characters can cause the chat to enter a hot loop on one of the processes, consuming ~120% CPU and rendering the service unresponsive.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.