Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5.3
CVSSv3

CVE-2020-28208

Published: 08/01/2021 Updated: 01/02/2021
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 446
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Subscribe to Rocket.chat

Vulnerability Summary

An email address enumeration vulnerability exists in the password reset function of Rocket.Chat up to and including 3.9.1.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

rocket.chat rocket.chat

Exploits

Exploit DB: Rocket.Chat 3.7.1 Email Address Enumeration
RocketChat versions 371 and below suffers from an email address enumeration vulnerability ...

Mailing Lists

Full Disclosure: Re: Trovent Security Advisory 2010-01 [updated] / CVE-2020-28208: Rocket.Chat email address enumeration vulnerability
<!--X-Body-Begin--> <!--X-User-Header--> Full Disclosure mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> Re: Trovent Security Advisory 2010-01 [updated] / CVE-2020-28208: RocketChat email address enumeration vulnerability ...

References

CWE-203https://trovent.io/security-advisory-2010-01https://trovent.github.io/security-advisories/TRSA-2010-01/TRSA-2010-01.txthttp://www.openwall.com/lists/oss-security/2021/01/07/1http://www.openwall.com/lists/oss-security/2021/01/08/1http://packetstormsecurity.com/files/160845/Rocket.Chat-3.7.1-Email-Address-Enumeration.htmlhttp://seclists.org/fulldisclosure/2021/Jan/32http://www.openwall.com/lists/oss-security/2021/01/13/1http://seclists.org/fulldisclosure/2021/Jan/43https://nvd.nist.govhttps://packetstormsecurity.com/files/160845/Rocket.Chat-3.7.1-Email-Address-Enumeration.html
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook