In Zulip Server versions 1.5.x, 1.6.x, and 1.7.x before 1.7.2, there was an XSS issue with muting notifications.
References
Link | Resource |
---|---|
https://blog.zulip.org/2018/04/12/zulip-1-7-2-released/ | Release Notes Vendor Advisory |
Configurations
Information
Published : 2018-04-18 01:29
Updated : 2018-05-21 10:22
NVD link : CVE-2018-9987
Mitre link : CVE-2018-9987
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
zulip
- zulip_server