CVE-2020-9444

2020-04-2020:15:11

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.8%

JSON

Zulip Server before 2.1.3 allows reverse tabnabbing via the Markdown functionality.

CPENameOperatorVersion
zulipeq1.3.11
zulipeq2.1.0-rc1
zulipeqshared-0.0.2
zulipeq1.9.0
zulipeq1.4.0
zulipeq2.1.0
zulipeq1.9.0-rc2
zulipeq1.3.6
zulipeq2.0.0-rc1
zulipeq1.8.0

Name	Operator	Version
zulip	eq	1.3.11
zulip	eq	2.1.0-rc1
zulip	eq	shared-0.0.2
zulip	eq	1.9.0
zulip	eq	1.4.0
zulip	eq	2.1.0
zulip	eq	1.9.0-rc2
zulip	eq	1.3.6
zulip	eq	2.0.0-rc1
zulip	eq	1.8.0

Rows per page:

1-10 of 351

References

blog.zulip.org/2020/04/01/zulip-server-2-1-3-security-release/