← All advisories

Unrated severityNVD Advisory· Published Aug 21, 2020· Updated Aug 4, 2024

CVE-2020-14215

CVE-2020-14215

Description

Zulip Server before 2.1.5 has Incorrect Access Control because 0198_preregistrationuser_invited_as adds the administrator role to invitations.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Zulip/Zulip Serverdescription
Zulip/Zulip Serverllm-fuzzy
Range: <2.1.5

Patches

Vulnerability mechanics

References

1

blog.zulip.com/2020/06/17/zulip-server-2-1-5-security-release/mitrex_refsource_CONFIRM

News mentions

0

No linked articles in our index yet.