Rocket.chat: SQL injection security bug on Rocket.chat

[antn89]

Hi guy,

I install the lastest version of rocket.chat (0.31), but it has security bug as below. How is fix it ?

High:
wpoison (nasl version)
Risk:High
Application:https
Port:443
Protocol:tcp
ScriptID:11139
The following URLs seem to be vulnerable to BLIND SQL injection
techniques :
/a24a245b3b0c75ee0eef646c0de8c3ed18a3a470.css?meteor_css_resource=true+AND+1=1
An attacker may exploit this flaws to bypass authentication
or to take the control of the remote database.

[engelgabriel]

We dont use SQL, so this is incorrect.

[antn89]

Thank you,

[raphapy]

LOL