Cpe:2.3:a:rocket.chat:rocket.chat:3.12.0:-:*:*:*:*:*:*

A critical unauthenticated NoSQL injection vulnerability in Rocket.Chat versions prior to 3.12.7 allows attackers to reset administrator credentials and achieve remote code execution via malicious webhook integration scripts.