CVE-2021-30487

2021-04-1500:15:13

Google

osv.dev

zulip server

message movement

organization administrators

software security

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

22.7%

JSON

In the topic moving API in Zulip Server 3.x before 3.4, organization administrators were able to move messages to streams in other organizations hosted by the same Zulip installation.

References

blog.zulip.com/2021/04/14/zulip-server-3-4/