CVE-2022-31168

Zulip is an open source team chat tool. Due to an incorrect authorization check in Zulip Server 5.4 and earlier, a member of an organization could craft an API call that grants organization administrator privileges to one of their bots. The vulnerability is fixed in Zulip Server 5.5. Members who...

PT-2022-20582

Name of the Vulnerable Software and Affected Versions Zulip Server versions 5.4 and earlier Description The issue arises from an incorrect authorization check in Zulip Server, allowing a member of an organization to craft an API call that grants organization administrator privileges to one of the...