← All advisories

Medium severity4.3NVD Advisory· Published Jul 28, 2022· Updated Jun 17, 2026

CVE-2016-4426

CVE-2016-4426

Description

In zulip before 1.3.12, bot API keys were accessible to other users in the same realm.

Affected products

3

Zulip/Zulip3 versions
cpe:2.3:a:zulip:zulip:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:zulip:zulip:*:*:*:*:*:*:*:*range: <1.3.12
- (no CPE)
- (no CPE)range: <1.3.12

Patches

Vulnerability mechanics

References

1

zulip.readthedocs.io/en/2.1.7/overview/changelog.htmlnvdRelease NotesThird Party Advisory

News mentions

0

No linked articles in our index yet.