🎯 New Report #3383079: SSRF via Improper Redirect Validation in Rocket.Chat oEmbed Function
🔺Severity: Medium
👽 Reporter: button142857
⭐️ Reputation: 147
🛠 State: resolved
💼 Team: Rocket.Chat
💵 Bounty: null
🕐 Submitted: 2025-10-14
⏰ Disclosed: 2026-06-11 11:52:32
📝 Summary: A vulnerability was discovered in Rocket.Chat version 7.10.1 where the oEmbed feature did not properly validate redirected URLs. This allowed an attacker to bypass SSRF protections and access internal network resources that would otherwise be unreachable.
📂 Report JSON File: 3383079
@hackeronereports