🔺Severity: High
👽 Reporter: button142857
⭐️ Reputation: 147
🛠 State: resolved
💼 Team: Rocket.Chat
💵 Bounty: null
🕐 Submitted: 2025-12-20
⏰ Disclosed: 2026-07-29 01:48:49
📝 Summary: An SSRF vulnerability was discovered in Rocket.Chat version 7.13.2 that was caused by a DNS rebinding attack. The vulnerability allowed an attacker to bypass a security check and access internal hosts on the same network as the Rocket.Chat server. The vulnerability was present in the SMS integration feature that used the
checkUrlForSsrf function, which was bypassed by the DNS rebinding attack.📂 Report JSON File: 3473145
@hackeronereports