CVE-2026-22560

Published April 10th, 2026

View on NVD ↗

CVSS v3

5.3

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

An open redirect vulnerability in Rocket.Chat versions prior to 8.4.0 allows users to be redirected to arbitrary URLs by manipulating parameters within a SAML endpoint.

RocketChat/Rocket.Chat

The Secure CommsOS™ for mission-critical operations

GitHub

45.7K