Predicting MongoDB ObjectId continuously in Rocket.Chat

Aikido's AI pentester found this file-access flaw in Rocket.Chat. A closer look at MongoDB's ObjectId showed the weak randomness that makes it exploitable. Category: Vulnerabilities & Threats