Cross site scripting

2018-04-1808:29:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.2%

In Zulip Server versions before 1.7.2, there was an XSS issue with stream names in topic typeahead.

CPENameOperatorVersion
zulip_serverlt1.7.2

CPE	Name	Operator	Version
	zulip_server	lt	1.7.2

References

blog.zulip.org/2018/04/12/zulip-1-7-2-released/