CVE-2020-8288
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-8288
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The `specializedRendering` function in Rocket.Chat server before 3.9.2 allows a cross-site scripting (XSS) vulnerability by way of the `value` parameter.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Rocket.Chat server 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Rocket.Chat是一套开源的团队聊天软件。 Rocket.Chat server before 3.9.2 存在跨站脚本漏洞，该漏洞源于 value 参数。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Rocket.Chat server | Fixed in 3.9.2 | - |
II. Public POCs for CVE-2020-8288
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-8288
Please Login to view more intelligence information
- https://docs.rocket.chat/guides/security/security-updatesx_refsource_MISC
- https://hackerone.com/reports/899954x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2020-8288
Same Patch Batch · n/a · 2021-01-21 · 23 CVEs total
| CVE-2021-21723 | 多款 ZTE 产品资源管理错误漏洞 | |
| CVE-2020-36200 | Kaspersky TinyCheck 代码问题漏洞 | |
| CVE-2020-36199 | Kaspersky TinyCheck 命令注入漏洞 | |
| CVE-2020-21147 | RockOA 跨站脚本漏洞 | |
| CVE-2020-21146 | Fehi CMS 跨站脚本漏洞 | |
| CVE-2020-36201 | 多款 Xerox 产品加密问题漏洞 | |
| CVE-2019-25015 | OpenWrt 跨站脚本漏洞 | |
| CVE-2021-22871 | Revive Adserver 跨站脚本漏洞 | |
| CVE-2021-22872 | Revive Adserver 跨站脚本漏洞 | |
| CVE-2021-22873 | Revive Adserver 输入验证错误漏洞 | |
| CVE-2020-8292 | Rocket.Chat 跨站脚本漏洞 | |
| CVE-2020-27583 | IBM InfoSphere Information Server 代码问题漏洞 | |
| CVE-2020-22643 | FeehiCMS 代码问题漏洞 | |
| CVE-2021-3152 | Home Assistant 路径遍历漏洞 | |
| CVE-2020-28874 | ProjectSend 安全漏洞 | |
| CVE-2020-35309 | Egavilan Media Bakeshop Online Ordering System 跨站脚本漏洞 | |
| CVE-2020-29241 | Online News Portal 跨站脚本漏洞 | |
| CVE-2020-26941 | ESET NOD32 Antivirus 访问控制错误漏洞 | |
| CVE-2021-3195 | Bitcoin Core 输入验证错误漏洞 | |
| CVE-2021-3190 | Omrilotan async-git 操作系统命令注入漏洞 |
Showing top 20 of 23 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8226
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial - CVE-2026-8225
Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_han - CVE-2026-8224
Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of serv - CVE-2026-8223
Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send - CVE-2026-8222
Open5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_managem
Same weakness: CWE-79
- CVE-2021-47950
Advanced Guestbook 2.4.4 Persistent XSS via Smilies - CVE-2021-47951
WordPress Picture Gallery 1.4.2 Stored XSS via Edit Content - CVE-2021-47947
Projectsend r1295 Stored Cross-Site Scripting via files-edit - CVE-2021-47931
Exponent CMS 2.6 Multiple Vulnerabilities Stored XSS Authent - CVE-2021-47929
WordPress Plugin Filterable Portfolio Gallery 1.0 Stored XSS
V. Comments for CVE-2020-8288
No comments yet