CVE-2021-22886

Rocket.Chat before 3.11, 3.10.5, 3.9.7, 3.8.8 is vulnerable to persistent cross-site scripting (XSS) using nested markdown tags allowing a remote attacker to inject arbitrary JavaScript in a message. This flaw leads to arbitrary file read and RCE on Rocket.Chat desktop app.

• CWE-79
• CWE-79

• https://docs.rocket.chat/guides/security/security-updatesVendor Advisory
• https://github.com/RocketChat/Rocket.Chat/pull/20430Patch, Third Party Advisory
• https://hackerone.com/reports/1014459Third Party Advisory
• https://docs.rocket.chat/guides/security/security-updatesVendor Advisory
• https://github.com/RocketChat/Rocket.Chat/pull/20430Patch, Third Party Advisory
• https://hackerone.com/reports/1014459Third Party Advisory

Published

Mar 26, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-22880The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.…7.5
• CVE-2021-22881The Host Authorization middleware in Action Pack before 6.1.…6.1
• CVE-2021-22882UniFi Protect before v1.17.1 allows an attacker to use spoof…7.5
• CVE-2021-22883Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vul…7.5
• CVE-2021-22884Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vul…7.5
• CVE-2021-22885A possible information disclosure / unintended method execut…7.5
• CVE-2021-22887A vulnerability in the BIOS of Pulse Secure (PSA-Series Hard…2.3
• CVE-2021-22888Revive Adserver before v5.2.0 is vulnerable to a reflected X…6.1
• CVE-2021-22889Revive Adserver before v5.2.0 is vulnerable to a reflected X…6.1
• CVE-2021-2289Vulnerability in the Oracle Product Hub product of Oracle E-…8.1
• CVE-2021-22890curl 7.63.0 to and including 7.75.0 includes vulnerability t…3.7
• CVE-2021-22891A missing authorization vulnerability exists in Citrix Share…9.8