254 matches found
Zulip Server Cross-Site Scripting Vulnerability (CNVD-2018-08600)
Zulip Server is a set of open source group chat application written in Python based on the Django framework . frontend markdown processor is one of the front-end markdown markup language processor . A cross-site scripting vulnerability exists in the frontend markdown processor in Zulip Server...
Cross site scripting
In Zulip Server versions before 1.7.2, there was an XSS issue with stream names in topic typeahead...
Cross site scripting
In Zulip Server versions 1.5.x, 1.6.x, and 1.7.x before 1.7.2, there was an XSS issue with muting notifications...
CVE-2018-9990
In Zulip Server versions before 1.7.2, there was an XSS issue with stream names in topic typeahead...
CVE-2018-9986
In Zulip Server versions before 1.7.2, there were XSS issues with the frontend markdown processor...
CVE-2018-9999
In Zulip Server versions before 1.7.2, there was an XSS issue with user uploads and the default LOCALUPLOADSDIR storage backend...
CVE-2018-9999
In Zulip Server versions before 1.7.2, there was an XSS issue with user uploads and the default LOCALUPLOADSDIR storage backend...
CVE-2018-9987
In Zulip Server versions 1.5.x, 1.6.x, and 1.7.x before 1.7.2, there was an XSS issue with muting notifications...
CVE-2018-9987
In Zulip Server versions 1.5.x, 1.6.x, and 1.7.x before 1.7.2, there was an XSS issue with muting notifications...
Cross site scripting
In Zulip Server versions before 1.7.2, there was an XSS issue with user uploads and the default LOCALUPLOADSDIR storage backend...
CVE-2018-9990
In Zulip Server versions before 1.7.2, there was an XSS issue with stream names in topic typeahead...
Cross site scripting
In Zulip Server versions before 1.7.2, there were XSS issues with the frontend markdown processor...
CVE-2018-9986
In Zulip Server versions before 1.7.2, there were XSS issues with the frontend markdown processor...
CVE-2018-9990
In Zulip Server versions before 1.7.2, there was an XSS issue with stream names in topic typeahead...
CVE-2018-9987
CVE-2018-9987 concerns Zulip Server prior to 1.7.2, where versions 1.5.x, 1.6.x and 1.7.x were affected by an XSS issue triggered when muting notifications. The vulnerability affects the Zulip Server (Python/Django-based chat platform) and is triggered in the input handling related to notificatio...
CVE-2018-9999
CVE-2018-9999 affects Zulip Server prior to 1.7.2. The issue is an XSS vulnerability triggered by user uploads when using the default LOCAL_UPLOADS_DIR storage backend. The connected sources confirm this is a cross-site scripting flaw in versions
CVE-2018-9987
In Zulip Server versions 1.5.x, 1.6.x, and 1.7.x before 1.7.2, there was an XSS issue with muting notifications...
CVE-2018-9986
Summary: CVE-2018-9986 affects Zulip Server prior to 1.7.2, where the frontend markdown processor allows cross-site scripting (XSS). What’s affected: Zulip Server versions before 1.7.2; vulnerable component is the frontend markdown processor used for rendering content. Impact (as described): An a...