Medium severity5.3NVD Advisory· Published Apr 15, 2021· Updated Jun 17, 2026
CVE-2021-30479
CVE-2021-30479
Description
An issue was discovered in Zulip Server before 3.4. A bug in the implementation of the all_public_streams API feature resulted in guest users being able to receive message traffic to public streams that should have been only accessible to members of the organization.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:zulip:zulip_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:zulip:zulip_server:*:*:*:*:*:*:*:*range: <3.4
- (no CPE)range: <3.4
- Zulip/Zulip Serverdescription
Patches
Vulnerability mechanics
References
1- blog.zulip.com/2021/04/14/zulip-server-3-4/nvdVendor Advisory
News mentions
0No linked articles in our index yet.