Filtered by vendor Zulip
Subscriptions
Total
47 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2017-0910 | 1 Zulip | 1 Zulip Server | 2024-09-17 | N/A |
| In Zulip Server before 1.7.1, on a server with multiple realms, a vulnerability in the invitation system lets an authorized user of one realm on the server create a user account on any other realm. | ||||
| CVE-2023-47642 | 1 Zulip | 1 Zulip Server | 2024-08-29 | 4.3 Medium |
| Zulip is an open-source team collaboration tool. It was discovered by the Zulip development team that active users who had previously been subscribed to a stream incorrectly continued being able to use the Zulip API to access metadata for that stream. As a result, users who had been removed from a stream, but still had an account in the organization, could still view metadata for that stream (including the stream name, description, settings, and an email address used to send emails into the stream via the incoming email integration). This potentially allowed users to see changes to a stream’s metadata after they had lost access to the stream. This vulnerability has been addressed in version 7.5 and all users are advised to upgrade. There are no known workarounds for this issue. | ||||
| CVE-2016-4427 | 1 Zulip | 1 Zulip | 2024-08-06 | 7.5 High |
| In zulip before 1.3.12, deactivated users could access messages if SSO was enabled. | ||||
| CVE-2016-4426 | 1 Zulip | 1 Zulip | 2024-08-06 | 4.3 Medium |
| In zulip before 1.3.12, bot API keys were accessible to other users in the same realm. | ||||
| CVE-2017-0896 | 1 Zulip | 1 Zulip Server | 2024-08-05 | N/A |
| Zulip Server 1.5.1 and below suffer from an error in the implementation of the invite_by_admins_only setting in the Zulip group chat application server that allowed an authenticated user to invite other users to join a Zulip organization even if the organization was configured to prevent this. | ||||
| CVE-2017-0881 | 1 Zulip | 1 Zulip Server | 2024-08-05 | N/A |
| An error in the implementation of an autosubscribe feature in the check_stream_exists route of the Zulip group chat application server before 1.4.3 allowed an authenticated user to subscribe to a private stream that should have required an invitation from an existing member to join. The issue affects all previously released versions of the Zulip server. | ||||
| CVE-2018-9990 | 1 Zulip | 1 Zulip Server | 2024-08-05 | N/A |
| In Zulip Server versions before 1.7.2, there was an XSS issue with stream names in topic typeahead. | ||||
| CVE-2018-9999 | 1 Zulip | 1 Zulip Server | 2024-08-05 | N/A |
| In Zulip Server versions before 1.7.2, there was an XSS issue with user uploads and the (default) LOCAL_UPLOADS_DIR storage backend. | ||||
| CVE-2018-9987 | 1 Zulip | 1 Zulip Server | 2024-08-05 | N/A |
| In Zulip Server versions 1.5.x, 1.6.x, and 1.7.x before 1.7.2, there was an XSS issue with muting notifications. | ||||
| CVE-2018-9986 | 1 Zulip | 1 Zulip Server | 2024-08-05 | N/A |
| In Zulip Server versions before 1.7.2, there were XSS issues with the frontend markdown processor. | ||||
| CVE-2019-19775 | 1 Zulip | 1 Zulip Server | 2024-08-05 | 6.1 Medium |
| The image thumbnailing handler in Zulip Server versions 1.9.0 to before 2.0.8 allowed an open redirect that was visible to logged-in users. | ||||
| CVE-2019-18933 | 1 Zulip | 1 Zulip Server | 2024-08-05 | 9.8 Critical |
| In Zulip Server versions from 1.7.0 to before 2.0.7, a bug in the new user signup process meant that users who registered their account using social authentication (e.g., GitHub or Google SSO) in an organization that also allows password authentication could have their personal API key stolen by an unprivileged attacker, allowing nearly full access to the user's account. | ||||
| CVE-2019-16216 | 1 Zulip | 1 Zulip Server | 2024-08-05 | 5.4 Medium |
| Zulip server before 2.0.5 incompletely validated the MIME types of uploaded files. A user who is logged into the server could upload files of certain types to mount a stored cross-site scripting attack on other logged-in users. On a Zulip server using the default local uploads backend, the attack is only effective against browsers lacking support for Content-Security-Policy such as Internet Explorer 11. On a Zulip server using the S3 uploads backend, the attack is confined to the origin of the configured S3 uploads hostname and cannot reach the Zulip server itself. | ||||
| CVE-2019-16215 | 1 Zulip | 1 Zulip Server | 2024-08-05 | 6.5 Medium |
| The Markdown parser in Zulip server before 2.0.5 used a regular expression vulnerable to exponential backtracking. A user who is logged into the server could send a crafted message causing the server to spend an effectively arbitrary amount of CPU time and stall the processing of future messages. | ||||
| CVE-2020-15070 | 1 Zulip | 1 Zulip Server | 2024-08-04 | 8.8 High |
| Zulip Server 2.x before 2.1.7 allows eval injection if a privileged attacker were able to write directly to the postgres database, and chose to write a crafted custom profile field value. | ||||
| CVE-2020-14194 | 1 Zulip | 1 Zulip Server | 2024-08-04 | 5.4 Medium |
| Zulip Server before 2.1.5 allows reverse tabnapping via a topic header link. | ||||
| CVE-2020-14215 | 1 Zulip | 1 Zulip Server | 2024-08-04 | 7.5 High |
| Zulip Server before 2.1.5 has Incorrect Access Control because 0198_preregistrationuser_invited_as adds the administrator role to invitations. | ||||
| CVE-2020-12759 | 1 Zulip | 1 Zulip Server | 2024-08-04 | 6.1 Medium |
| Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook. | ||||
| CVE-2020-10935 | 1 Zulip | 1 Zulip Server | 2024-08-04 | 5.4 Medium |
| Zulip Server before 2.1.3 allows XSS via a Markdown link, with resultant account takeover. | ||||
| CVE-2020-10858 | 1 Zulip | 1 Zulip Desktop | 2024-08-04 | 5.3 Medium |
| Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler. | ||||