CVE-2021-30477

🗓️ 15 Apr 2021 00:13:15Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 58 Views

Zulip Server before 3.4 allows outgoing webhook bot to send unauthorized messages to private streams

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2021-30477	14 Apr 202123:45	–	cvelist
OSV	CVE-2021-30477	15 Apr 202100:15	–	osv
NVD	CVE-2021-30477	15 Apr 202100:15	–	nvd
CNVD	Zulip server access control error vulnerability	8 May 202100:00	–	cnvd
Prion	Design/Logic Flaw	15 Apr 202100:15	–	prion

Nvd

Node

zulip zulip_serverRange<3.4

Source	Link
blog	www.blog.zulip.com/2021/04/14/zulip-server-3-4/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Apr 2021 00:15Current

4.5Medium risk

Vulners AI Score4.5

CVSS24

CVSS34.3

EPSS0.00051