VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Apr 15, 2021· Updated Jun 17, 2026

CVE-2021-30477

CVE-2021-30477

Description

An issue was discovered in Zulip Server before 3.4. A bug in the implementation of replies to messages sent by outgoing webhooks to private streams meant that an outgoing webhook bot could be used to send messages to private streams that the user was not intended to be able to send messages to.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Zulip/Zulip Server2 versions
    cpe:2.3:a:zulip:zulip_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:zulip:zulip_server:*:*:*:*:*:*:*:*range: <3.4
    • (no CPE)range: <3.4
  • Zulip/Zulip Serverdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.