CVE:CVE-2021-22910
CNNVD:CNNVD-202108-791
Rocket.Chat是一套开源的团队聊天软件。
Rocket.Chat 服务器版本 <3.13.2、<3.12.4、<3.11.4 中存在安全漏洞，该漏洞允许对端点进行查询，这可能导致 NoSQL 注入，从而可能导致 RCE。
solution:Upgrade rocket.chat rocket.chat to a higher version than 3.11.4,3.12.4,3.13.2,and avoid the version (,3.11.4),[3.12.0,3.12.4),[3.13.0,3.13.2)
solution:Upgrade schneider-electric evlink_city_evc1s22p4_firmware to a higher version than r8_v3.4.0.1,and avoid the version (,r8_v3.4.0.1); Upgrade schneider-electric evlink_city_evc1s7p4_firmware to a higher version than r8_v3.4.0.1,and avoid the version (,r8_v3.4.0.1); Upgrade schneider-electric evlink_parking_evw2_firmware to a higher version than r8_v3.4.0.1,and avoid the version (,r8_v3.4.0.1); Upgrade schneider-electric evlink_parking_evf2_firmware to a higher version than r8_v3.4.0.1,and avoid the version (,r8_v3.4.0.1); Upgrade schneider-electric evlink_parking_ev.2_firmware to a higher version than r8_v3.4.0.1,and avoid the version (,r8_v3.4.0.1); Upgrade schneider-electric evlink_smart_wallbox_evb1a_firmware to a higher version than r8_v3.4.0.1,and avoid the version (,r8_v3.4.0.1)