Critical severity9.8NVD Advisory· Published May 9, 2020· Updated Jun 17, 2026

CVE-2020-12637

Description

Zulip Desktop before 5.2.0 has Missing SSL Certificate Validation because all validation was inadvertently disabled during an attempt to recognize the ignoreCerts option.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zulipchat/Zulip Desktop
cpe:2.3:a:zulipchat:zulip_desktop:*:*:*:*:*:*:*:*
Range: >=0.5.10,<5.2.0
Zulip/Zulip Desktopdescription
Zulip/Zulipllm-fuzzy
Range: <5.2.0

Patches

Vulnerability mechanics

References

blog.zulip.org/2020/05/06/zulip-desktop-5-2-0-security-release/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000