← All advisories

High severity7.5NVD Advisory· Published Jul 28, 2022· Updated Jun 17, 2026

CVE-2016-4427

CVE-2016-4427

Description

In zulip before 1.3.12, deactivated users could access messages if SSO was enabled.

Affected products

3

Zulip/Zulip3 versions
cpe:2.3:a:zulip:zulip:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:zulip:zulip:*:*:*:*:*:*:*:*range: <1.3.12
- (no CPE)
- (no CPE)range: <1.3.12

Patches

Vulnerability mechanics

References

1

zulip.readthedocs.io/en/2.1.7/overview/changelog.htmlnvdRelease NotesThird Party Advisory

News mentions

0

No linked articles in our index yet.