Cross site scripting

2018-04-1808:29:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.2%

In Zulip Server versions 1.5.x, 1.6.x, and 1.7.x before 1.7.2, there was an XSS issue with muting notifications.

CPENameOperatorVersion
zulip_serverge1.5.0
zulip_serverlt1.7.2

CPE	Name	Operator	Version
	zulip_server	ge	1.5.0
	zulip_server	lt	1.7.2

References

blog.zulip.org/2018/04/12/zulip-1-7-2-released/