Unknown · Rocket.Chat · CVE-2023-28359
**Name of the Vulnerable Software and Affected Versions**
Rocket.Chat (affected versions not specified)
**Description**
A NoSQL injection issue has been identified in the listEmojiCustom method call within Rocket.Chat. This can be exploited by unauthenticated users when there is at least one custom emoji uploaded to the Rocket.Chat instance. The issue causes a delay in the server response, with the potential for limited impact.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.