CVE-2024-39713: Rocket.chat

High severity, CVSS 8.6. EPSS: 3.2% chance of exploitation in the next 30 days.

A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1.

Affected products

• Rocket.chat Rocket.chat: before 6.10.1 (fixed in 6.10.1)

Published 2024-08-05. Last modified 2026-06-17.