Medium severity5.4OSV Advisory· Published Apr 18, 2018· Updated Jun 17, 2026
CVE-2018-9999
CVE-2018-9999
Description
In Zulip Server versions before 1.7.2, there was an XSS issue with user uploads and the (default) LOCAL_UPLOADS_DIR storage backend.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <1.7.2
Patches
Vulnerability mechanics
References
1- blog.zulip.org/2018/04/12/zulip-1-7-2-released/nvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.