> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# CVE-2024-39713: Rocket.Chat SSRF PoC
- URL: https://darkwebinformer.com/cve-2024-39713-rocket-chat-ssrf-poc/
- Published: 2025-02-07T19:46:44.000Z
- Updated: 2025-09-04T22:24:08.000Z
- Author: Dark Web Informer
- Tags: Vulnerabilities, Tools

---

GitHub: <https://github.com/typical-pashochek/CVE-2024-39713>

---

[](https://github.com/typical-pashochek/CVE-2024-39713#cve-2024-39713-rocketchat-ssrf-poc)

## Description

[](https://github.com/typical-pashochek/CVE-2024-39713#description)

A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1.

**Links:**

- <https://nvd.nist.gov/vuln/detail/CVE-2024-39713>
- <https://hackerone.com/reports/1886954>

## Usage

[](https://github.com/typical-pashochek/CVE-2024-39713#usage)

```
pip install -r requirements.txt
python3 CVE-2024-39713.py -u [Rocket.Chat URL] -t [SSRF target]

```

```
nuclei -t CVE-2024-39713.yaml -u [Rocket.Chat URL]

```

## Demo

[](https://github.com/typical-pashochek/CVE-2024-39713#demo)

![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2025/02/28903589798235.gif)

## Disclaimer

[](https://github.com/typical-pashochek/CVE-2024-39713#disclaimer)

This Proof of Concept is provided for educational and research purposes only. It is intended to help security professionals, developers, and researchers understand and mitigate vulnerabilities.

The author is not responsible for any misuse, damage, or legal consequences resulting from the use of this PoC.