Security Advisory
CVE-2017-1000493
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Rocket.Chat Server version 0.59 and prior is vulnerable to a NoSQL injection leading to administrator account takeover