[Security Vulnerability Rocket.chat] HTML Injection into Email via Signup

How it was found

Description Due to a lack of  sanitization and validation in parameter affected, we can input HTML Tag and system will render it into Email victim. 

Affected Endpoint

https://chat.oas.greenhost.net/home  

Parameter : Name

Step to produce

[image: image.png]

In textbox name, input HTML code like

"><img src=https://www.no-gods-no-masters.com/images_designs/anonymous-gandhi-d001001207265.png>”@x.y "  

And in Email, input your victim email. Then click Lets Go / Submit.

When victim open email from your system, it will look.  

[image: image.png]

[image: image.png]

Impact

• Phising

• Abusing other user

• Defacing

Fix

Filtering on parameter affected. <font color="#888888"><div><br></div>

Impact

• Phising

• Abusing other user

• Defacing