CVE-2020-29594

Name of the Vulnerable Software and Affected Versions Rocket.Chat versions prior to 0.74.4 Rocket.Chat versions 1.x prior to 1.3.4 Rocket.Chat versions 2.x prior to 2.4.13 Rocket.Chat versions 3.x prior to 3.7.3 Rocket.Chat versions 3.8.x prior to 3.8.3 Rocket.Chat versions 3.9.x prior to 3.9.1

Description The issue is related to the mishandling of SAML login.

Recommendations For Rocket.Chat versions prior to 0.74.4, update to version 0.74.4 or later. For Rocket.Chat versions 1.x prior to 1.3.4, update to version 1.3.4 or later. For Rocket.Chat versions 2.x prior to 2.4.13, update to version 2.4.13 or later. For Rocket.Chat versions 3.x prior to 3.7.3, update to version 3.7.3 or later. For Rocket.Chat versions 3.8.x prior to 3.8.3, update to version 3.8.3 or later. For Rocket.Chat versions 3.9.x prior to 3.9.1, update to version 3.9.1 or later.