{
  "affected": [
    {
      "ranges": [
        {
          "database_specific": {
            "versions": [
              {
                "introduced": "0"
              },
              {
                "fixed": "0.74.4"
              },
              {
                "introduced": "1.0.0"
              },
              {
                "fixed": "1.3.4"
              },
              {
                "introduced": "2.0.0"
              },
              {
                "fixed": "2.4.13"
              },
              {
                "introduced": "3.0.0"
              },
              {
                "fixed": "3.7.3"
              },
              {
                "introduced": "3.8.0"
              },
              {
                "fixed": "3.8.3"
              },
              {
                "introduced": "3.9.0"
              },
              {
                "fixed": "3.9.1"
              }
            ]
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "cd3b97dfb36b9987301ac455e80417a6fc130710"
            },
            {
              "introduced": "60f1a4afd6d91094b86a47576de1a8a15356029b"
            },
            {
              "fixed": "0f06ca8dff17307b2766d303672c159c54002917"
            },
            {
              "introduced": "92c00dc3c2cff601d6a01c9088f51e3ddcda70cb"
            },
            {
              "fixed": "64d3345016317a7b59a6f9d1c0d99d5d1a4c37d8"
            },
            {
              "introduced": "ea3a31afe6084d3a7593cad3ae6055c3b01744a2"
            },
            {
              "fixed": "11962f083c83bf7fd37b79613f18b62abea70a87"
            },
            {
              "introduced": "5f99f3d66b18233a7d856a8ab9b7bde3ebed685e"
            },
            {
              "fixed": "7b6e174d708fa6ef862252c4bb76afdd818e8c0e"
            },
            {
              "introduced": "d05e26f4fc0d770bfdaed7e8b81a55dbc85dc1d3"
            },
            {
              "fixed": "798241b9e5a45a7b118c09cee38b6d8e9c0e53e1"
            }
          ],
          "repo": "https://github.com/rocketchat/rocket.chat",
          "type": "GIT"
        }
      ]
    }
  ],
  "details": "Rocket.Chat before 0.74.4, 1.x before 1.3.4, 2.x before 2.4.13, 3.x before 3.7.3, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 mishandles SAML login.",
  "id": "CVE-2020-29594",
  "modified": "2026-03-13T21:53:16.202266510Z",
  "published": "2020-12-30T07:15:12.217Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://github.com/RocketChat/Rocket.Chat/releases/tag/3.9.1"
    },
    {
      "type": "FIX",
      "url": "https://github.com/RocketChat/Rocket.Chat/compare/3.8.2...3.8.3"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}