Zulip Server
by Zulip
Source repositories
CVEs (35)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-30479 | 0.00 | — | 0.01 | Apr 14, 2021 | An issue was discovered in Zulip Server before 3.4. A bug in the implementation of the all_public_streams API feature resulted in guest users being able to receive message traffic to public streams that should have been only accessible to members of the organization. | |||
| CVE-2021-30478 | 0.00 | — | 0.01 | Apr 14, 2021 | An issue was discovered in Zulip Server before 3.4. A bug in the implementation of the can_forge_sender permission (previously is_api_super_user) resulted in users with this permission being able to send messages appearing as if sent by a system bot, including to other… | |||
| CVE-2021-30477 | 0.00 | — | 0.01 | Apr 14, 2021 | An issue was discovered in Zulip Server before 3.4. A bug in the implementation of replies to messages sent by outgoing webhooks to private streams meant that an outgoing webhook bot could be used to send messages to private streams that the user was not intended to be able to… | |||
| CVE-2021-30487 | 0.00 | — | 0.01 | Apr 14, 2021 | In the topic moving API in Zulip Server 3.x before 3.4, organization administrators were able to move messages to streams in other organizations hosted by the same Zulip installation. | |||
| CVE-2020-12759 | 0.00 | — | 0.01 | Aug 21, 2020 | Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook. | |||
| CVE-2020-14194 | 0.00 | — | 0.01 | Aug 21, 2020 | Zulip Server before 2.1.5 allows reverse tabnapping via a topic header link. | |||
| CVE-2020-14215 | 0.00 | — | 0.01 | Aug 21, 2020 | Zulip Server before 2.1.5 has Incorrect Access Control because 0198_preregistrationuser_invited_as adds the administrator role to invitations. | |||
| CVE-2020-15070 | 0.00 | — | 0.01 | Aug 21, 2020 | Zulip Server 2.x before 2.1.7 allows eval injection if a privileged attacker were able to write directly to the postgres database, and chose to write a crafted custom profile field value. | |||
| CVE-2020-9445 | 0.00 | — | 0.01 | Apr 20, 2020 | Zulip Server before 2.1.3 allows XSS via the modal_link feature in the Markdown functionality. | |||
| CVE-2020-9444 | 0.00 | — | 0.01 | Apr 20, 2020 | Zulip Server before 2.1.3 allows reverse tabnabbing via the Markdown functionality. | |||
| CVE-2020-10935 | 0.00 | — | 0.01 | Apr 20, 2020 | Zulip Server before 2.1.3 allows XSS via a Markdown link, with resultant account takeover. | |||
| CVE-2019-19775 | 0.00 | — | 0.01 | Dec 18, 2019 | The image thumbnailing handler in Zulip Server versions 1.9.0 to before 2.0.8 allowed an open redirect that was visible to logged-in users. | |||
| CVE-2019-18933 | 0.00 | — | 0.01 | Nov 21, 2019 | In Zulip Server versions from 1.7.0 to before 2.0.7, a bug in the new user signup process meant that users who registered their account using social authentication (e.g., GitHub or Google SSO) in an organization that also allows password authentication could have their personal… | |||
| CVE-2019-16216 | 0.00 | — | 0.01 | Sep 18, 2019 | Zulip server before 2.0.5 incompletely validated the MIME types of uploaded files. A user who is logged into the server could upload files of certain types to mount a stored cross-site scripting attack on other logged-in users. On a Zulip server using the default local uploads… | |||
| CVE-2019-16215 | 0.00 | — | 0.01 | Sep 18, 2019 | The Markdown parser in Zulip server before 2.0.5 used a regular expression vulnerable to exponential backtracking. A user who is logged into the server could send a crafted message causing the server to spend an effectively arbitrary amount of CPU time and stall the processing… |
- CVE-2021-30479Apr 14, 2021risk 0.00cvss —epss 0.01
An issue was discovered in Zulip Server before 3.4. A bug in the implementation of the all_public_streams API feature resulted in guest users being able to receive message traffic to public streams that should have been only accessible to members of the organization.
- CVE-2021-30478Apr 14, 2021risk 0.00cvss —epss 0.01
An issue was discovered in Zulip Server before 3.4. A bug in the implementation of the can_forge_sender permission (previously is_api_super_user) resulted in users with this permission being able to send messages appearing as if sent by a system bot, including to other…
- CVE-2021-30477Apr 14, 2021risk 0.00cvss —epss 0.01
An issue was discovered in Zulip Server before 3.4. A bug in the implementation of replies to messages sent by outgoing webhooks to private streams meant that an outgoing webhook bot could be used to send messages to private streams that the user was not intended to be able to…
- CVE-2021-30487Apr 14, 2021risk 0.00cvss —epss 0.01
In the topic moving API in Zulip Server 3.x before 3.4, organization administrators were able to move messages to streams in other organizations hosted by the same Zulip installation.
- CVE-2020-12759Aug 21, 2020risk 0.00cvss —epss 0.01
Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook.
- CVE-2020-14194Aug 21, 2020risk 0.00cvss —epss 0.01
Zulip Server before 2.1.5 allows reverse tabnapping via a topic header link.
- CVE-2020-14215Aug 21, 2020risk 0.00cvss —epss 0.01
Zulip Server before 2.1.5 has Incorrect Access Control because 0198_preregistrationuser_invited_as adds the administrator role to invitations.
- CVE-2020-15070Aug 21, 2020risk 0.00cvss —epss 0.01
Zulip Server 2.x before 2.1.7 allows eval injection if a privileged attacker were able to write directly to the postgres database, and chose to write a crafted custom profile field value.
- CVE-2020-9445Apr 20, 2020risk 0.00cvss —epss 0.01
Zulip Server before 2.1.3 allows XSS via the modal_link feature in the Markdown functionality.
- CVE-2020-9444Apr 20, 2020risk 0.00cvss —epss 0.01
Zulip Server before 2.1.3 allows reverse tabnabbing via the Markdown functionality.
- CVE-2020-10935Apr 20, 2020risk 0.00cvss —epss 0.01
Zulip Server before 2.1.3 allows XSS via a Markdown link, with resultant account takeover.
- CVE-2019-19775Dec 18, 2019risk 0.00cvss —epss 0.01
The image thumbnailing handler in Zulip Server versions 1.9.0 to before 2.0.8 allowed an open redirect that was visible to logged-in users.
- CVE-2019-18933Nov 21, 2019risk 0.00cvss —epss 0.01
In Zulip Server versions from 1.7.0 to before 2.0.7, a bug in the new user signup process meant that users who registered their account using social authentication (e.g., GitHub or Google SSO) in an organization that also allows password authentication could have their personal…
- CVE-2019-16216Sep 18, 2019risk 0.00cvss —epss 0.01
Zulip server before 2.0.5 incompletely validated the MIME types of uploaded files. A user who is logged into the server could upload files of certain types to mount a stored cross-site scripting attack on other logged-in users. On a Zulip server using the default local uploads…
- CVE-2019-16215Sep 18, 2019risk 0.00cvss —epss 0.01
The Markdown parser in Zulip server before 2.0.5 used a regular expression vulnerable to exponential backtracking. A user who is logged into the server could send a crafted message causing the server to spend an effectively arbitrary amount of CPU time and stall the processing…
Page 2 of 2