Filtered by vendor Zulipchat Subscriptions
Filtered by product Zulip Desktop Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-24582 1 Zulipchat 1 Zulip Desktop 2024-08-04 6.1 Medium
Zulip Desktop before 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user interface.
CVE-2020-12637 1 Zulipchat 1 Zulip Desktop 2024-08-04 9.8 Critical
Zulip Desktop before 5.2.0 has Missing SSL Certificate Validation because all validation was inadvertently disabled during an attempt to recognize the ignoreCerts option.
CVE-2020-9443 1 Zulipchat 1 Zulip Desktop 2024-08-04 6.1 Medium
Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a number of ways. This especially affects Zulip Desktop 2.3.82.