610 matches found
CVE-2024-36625
Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the replaceemojiwithtext function in uiutil.ts...
CVE-2024-36625
Zulip 8.3 is vulnerable to Cross-Site Scripting (XSS) through the replace_emoji_with_text function in ui_util.ts. The Red Hat, NVD, OSV, CIRCL, CNNVD, CVE.org, and PT Security entries consistently describe this XSS vector involving the emoji replacement logic, but do not provide a tested exploit ...
CVE-2024-36624
Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the constructcopydiv function in copyandpaste.js...
CVE-2024-36612
Zulip 8.0–8.3 contains a memory-leak vulnerability in the handling of popovers. The issue affects the popover handling path and results in increased memory usage (memory leak). Affected products: Zulip versions 8.0 through 8.3. Root cause and exact exploit vectors are not detailed in the provided...
CVE-2024-36624
Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the constructcopydiv function in copyandpaste.js...
CVE-2024-36625
Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the replaceemojiwithtext function in uiutil.ts...
Zulip 安全漏洞
Zulip is a powerful open source group chat application from Zulip, Inc. for combining the immediacy of real-time chat with the productivity benefits of threaded conversations. A security vulnerability exists in Zulip versions 8.0 through 8.3 that stems from a memory leak when handling pop-up...
CVE-2024-36612
Zulip from 8.0 to 8.3 contains a memory leak vulnerability in the handling of popovers...
Zulip 安全漏洞
Zulip is a powerful open source group chat application from Zulip, Inc. for combining the immediacy of real-time chat with the productivity benefits of threaded conversations. A security vulnerability exists in Zulip version 8.3 that stems from vulnerability to cross-site scripting XSS attacks...
CVE-2024-36624
Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the constructcopydiv function in copyandpaste.js...
CVE-2024-36612
Zulip from 8.0 to 8.3 contains a memory leak vulnerability in the handling of popovers...
PT-2024-27101 · Zulip · Zulip
Name of the Vulnerable Software and Affected Versions: Zulip version 8.3 Description: The issue is related to Cross Site Scripting XSS via the replace emoji with text function in ui util.ts. This function is potentially vulnerable to XSS attacks. Recommendations: For Zulip version 8.3, consider...
Zulip 安全漏洞
Zulip is a powerful open source group chat application from Zulip, Inc. for combining the immediacy of real-time chat with the productivity benefits of threaded conversations. A security vulnerability exists in Zulip version 8.3 that stems from vulnerability to cross-site scripting XSS attacks...
PT-2024-27100 · Zulip · Zulip
Name of the Vulnerable Software and Affected Versions: Zulip version 8.3 Description: The issue is related to Cross Site Scripting XSS via the construct copy div function in copy and paste.js. This allows for potential malicious script execution. Recommendations: For Zulip version 8.3, consider...
CVE-2024-36625
Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the replaceemojiwithtext function in uiutil.ts...
CVE-2024-36612
Zulip from 8.0 to 8.3 contains a memory leak vulnerability in the handling of popovers...
CVE-2024-36624
CVE-2024-36624 affects Zulip 8.3 and is caused by the construct_copy_div function in copy_and_paste.js, enabling Cross-Site Scripting (XSS). The vulnerability is confirmed across multiple feeds (NVD, OSV, CVE list) with the same description. Practical impact is XSS via copying/pasting content thr...
CVE-2024-27286
Zulip is an open-source team collaboration tool. When a user moves a Zulip message, they have the option to move all messages in the topic, move only subsequent messages as well, or move just a single message. If the user chose to just move one message, and was moving it from a public stream to a...
CVE-2024-27286 Moving single messages from public to private streams leaves them accessible
Zulip is an open-source team collaboration tool. When a user moves a Zulip message, they have the option to move all messages in the topic, move only subsequent messages as well, or move just a single message. If the user chose to just move one message, and was moving it from a public stream to a...
CVE-2024-27286 Moving single messages from public to private streams leaves them accessible
Zulip is an open-source team collaboration tool. When a user moves a Zulip message, they have the option to move all messages in the topic, move only subsequent messages as well, or move just a single message. If the user chose to just move one message, and was moving it from a public stream to a...