← All advisories

Medium severity6.1NVD Advisory· Published Dec 18, 2019· Updated Jun 17, 2026

CVE-2019-19775

CVE-2019-19775

Description

The image thumbnailing handler in Zulip Server versions 1.9.0 to before 2.0.8 allowed an open redirect that was visible to logged-in users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Zulip/Zulip Serverllm-fuzzy2 versions
1.9.0 to <2.0.8+ 1 more
- (no CPE)range: 1.9.0 to <2.0.8
- cpe:2.3:a:zulip:zulip_server:*:*:*:*:*:*:*:*range: >=1.9.0,<2.0.8
Zulip Server/Zulip Serverdescription

Patches

Vulnerability mechanics

References

2

github.com/zulip/zulip/commit/b7c87a4d82397a5e6ac169b6098bed0b1ae7a583nvdPatchThird Party Advisory
blog.zulip.org/2019/12/13/zulip-server-2-0-8-security-release/nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.