# Releasing cve-2022-32211 information

**URL:** <https://forums.rocket.chat/t/releasing-cve-2022-32211-information/14657>\
**Category:** Feedback\
**Created:** [August 11, 2022, 1:14pm UTC](https://forums.rocket.chat/t/releasing-cve-2022-32211-information/14657 "2022-08-11T13:14:51Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![stanner](https://avatars.discourse-cdn.com/v4/letter/s/b5e925/32.png) [@stanner](https://forums.rocket.chat/u/stanner)\
**Post date:** [August 11, 2022, 1:14pm UTC](https://forums.rocket.chat/t/releasing-cve-2022-32211-information/14657/1 "2022-08-11T13:14:51Z")

</div>

Hi

Information about cve-2022-32211 has still not been made puplic. see: [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32211](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32211)

This is in contradiction to what is stated here: [Security fixes and updates - Rocket.Chat Docs](https://docs.rocket.chat/guides/security/security-updates)  
The new version (5.0) has been out for a long time now. Could you please explain to us why the release is delayed?

By the way: I - a paying user - even created a support ticket about this, which has been unanswered for more than a week now (Ticket Id #48499)

Thanks in advance  
sandro

---

<div class="post-metadata">

**Author:** ![stanner](https://avatars.discourse-cdn.com/v4/letter/s/b5e925/32.png) [@stanner](https://forums.rocket.chat/u/stanner)\
**Post date:** [August 11, 2022, 1:15pm UTC](https://forums.rocket.chat/t/releasing-cve-2022-32211-information/14657/2 "2022-08-11T13:15:18Z")

</div>

(and it is not a new issue either. see: [Reintroduce documentation on "Security fixes and updates" please](https://forums.rocket.chat/t/reintroduce-documentation-on-security-fixes-and-updates-please/12706) )

---

<div class="post-metadata">

**Author:** ![igor.rincon](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/igor.rincon/32/3148_2.png) [@igor.rincon](https://forums.rocket.chat/u/igor.rincon)\
**Post date:** [August 25, 2022, 1:17pm UTC](https://forums.rocket.chat/t/releasing-cve-2022-32211-information/14657/3 "2022-08-25T13:17:50Z")

</div>

Hi,

Thanks for your question. Regarding this vulnerability we are waiting our users to upgrade the version so we can release more information about it. We already reserved the CVE number with MITRE and we will publish as soon we see our customers upgrading their environment.

---

<div class="post-metadata">

**Author:** ![stanner](https://avatars.discourse-cdn.com/v4/letter/s/b5e925/32.png) [@stanner](https://forums.rocket.chat/u/stanner)\
**Post date:** [August 25, 2022, 1:32pm UTC](https://forums.rocket.chat/t/releasing-cve-2022-32211-information/14657/4 "2022-08-25T13:32:33Z")

</div>

Thanks for the reply Igor. Do you monitor the versions of instances connected to cloud.rocket.chat? If so at what percentage are you planning on releasing the info? Was the policy from this article [Security fixes and updates - Rocket.Chat Docs](https://docs.rocket.chat/guides/security/security-updates) altered for this CVE only or is the article just out of date?  
Thanks in advance

---

<div class="post-metadata">

**Author:** ![stanner](https://avatars.discourse-cdn.com/v4/letter/s/b5e925/32.png) [@stanner](https://forums.rocket.chat/u/stanner)\
**Post date:** [September 10, 2022, 9:53am UTC](https://forums.rocket.chat/t/releasing-cve-2022-32211-information/14657/5 "2022-09-10T09:53:20Z")

</div>

Just wanted to check in and ask if you have any news about this? @igor.rincon

---

<div class="post-metadata">

**Author:** ![stanner](https://avatars.discourse-cdn.com/v4/letter/s/b5e925/32.png) [@stanner](https://forums.rocket.chat/u/stanner)\
**Post date:** [October 4, 2022, 9:02am UTC](https://forums.rocket.chat/t/releasing-cve-2022-32211-information/14657/6 "2022-10-04T09:02:03Z")

</div>

Could we get this disclosed, asap? It’s getting embarrassing. For four months I have had to put my boss off, and soon our licenses are running out… It would be a shame if we had to change providers because of such a trifle.

Besides: Such a lax approach to documenting security vulnerabilities would certainly scare me off if I were to evaluate a chat/collaboration tool today.  
@gabriel.engel @igor.rincon

---

<div class="post-metadata">

**Author:** ![dudanogueira](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/dudanogueira/32/2529_2.png) [@dudanogueira](https://forums.rocket.chat/u/dudanogueira)\
**Post date:** [October 4, 2022, 7:13pm UTC](https://forums.rocket.chat/t/releasing-cve-2022-32211-information/14657/7 "2022-10-04T19:13:44Z")

</div>

Hi! Can you check this link?

> **[CVE -
CVE-2022-32211](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32211)**
>
> The mission of the CVE® Program is to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities.

Thanks!
