High severity8.0NVD Advisory· Published Aug 29, 2022· Updated Jun 17, 2026

CVE-2022-35962

Description

Zulip is an open source team chat and Zulip Mobile is an app for iOS and Andriod users. In Zulip Mobile through version 27.189, a crafted link in a message sent by an authenticated user could lead to credential disclosure if a user follows the link. A patch was released in version 27.190.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zulip/Zulip3 versions
cpe:2.3:a:zulip:zulip:*:*:*:*:*:android:*:*+ 2 more
- cpe:2.3:a:zulip:zulip:*:*:*:*:*:android:*:*range: <27.190
- cpe:2.3:a:zulip:zulip:*:*:*:*:*:iphone_os:*:*range: <27.190
- (no CPE)range: <=27.189
zulip/zulip-mobilev5
Range: < 27.190

Patches

Vulnerability mechanics

References

blog.zulip.com/2022/08/24/zulip-server-5-6-security-release/nvdRelease NotesVendor Advisory
github.com/zulip/zulip-mobile/releases/tag/v27.190nvdThird Party Advisory
github.com/zulip/zulip-mobile/security/advisories/GHSA-4gj2-j32x-4wg5nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.520
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000