CVE-2022-32217: Rocket.chat

Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days.

A cleartext storage of sensitive information exists in Rocket.Chat <v4.6.4 due to Oauth token being leaked in plaintext in Rocket.chat logs.

Affected products

• Rocket.chat Rocket.chat: before 4.6.4 (fixed in 4.6.4)

Published 2022-09-23. Last modified 2026-06-17.