VULNERABILITY INTELLIGENCE

CVE-2025-5892

CVSS score4.3 MEDIUM
EPSS probability0.62%
CISA KEVNot currently listed
Published2025-06-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Description

A vulnerability, which was classified as problematic, has been found in RocketChat up to 7.6.1. This issue affects the function parseMessage of the file /apps/meteor/app/irc/server/servers/RFC2813/parseMessage.js. The manipulation of the argument line leads to inefficient regular expression complexity. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Weakness classification

  • cna@vuldb.com: CWE-400
  • nvd@nist.gov: CWE-1333

Primary references