🎯 New Report #3852135: DDP methods getThreadsList / getThreadMessages leaks private thread content to any authenticated low privilege user (unpatched sibling of #1446767)
🔺Severity: High
👽 Reporter: iamaangx028
⭐️ Reputation: 341
🛠 State: resolved
💼 Team: Rocket.Chat
💵 Bounty: null
🕐 Submitted: 2026-07-09
⏰ Disclosed: 2026-08-20 19:54:20
📝 Summary: null
📂 Report JSON File: 3852135
@hackeronereports
Post #873
78