CVE-2020-10857

2021-02-0520:15:12

Google

osv.dev

7.8 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.5%

JSON

Zulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remote code execution.

CPENameOperatorVersion
zulip-desktopeq2.3.6
zulip-desktopeq0.5.3
zulip-desktopeq0.5.1
zulip-desktopeq0.5.8
zulip-desktopeq1.5.0
zulip-desktopeq3.0.0
zulip-desktopeq1.4.0
zulip-desktopeq1.2.0-beta
zulip-desktopeq1.7.0
zulip-desktopeq0.5.10

Name	Operator	Version
zulip-desktop	eq	2.3.6
zulip-desktop	eq	0.5.3
zulip-desktop	eq	0.5.1
zulip-desktop	eq	0.5.8
zulip-desktop	eq	1.5.0
zulip-desktop	eq	3.0.0
zulip-desktop	eq	1.4.0
zulip-desktop	eq	1.2.0-beta
zulip-desktop	eq	1.7.0
zulip-desktop	eq	0.5.10