CVE-2023-23911 (published 2023-03-10T00:00:00)
An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption of a chat room by a user changing the group key of a chat room.
Affected products: Vendor: n/a
Product: Rocket.Chat
Versions: fixed version => 6.0