Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-42027

No fix known EPSS <1%CVSS 6.7

The E2EE password entropy generated by Rocket.Chat Mobile prior to version 4.5.1 is insufficient, allowing attackers to crack it if they have the appropriate time and resources.

Published 2024-10-07 · CVE record · OSV

Products: Rocket.Chat Mobile, RocketChat Rocket.Chat