CVE-2016-4427

CVE-2016-4427 affects Zulip before 1.3.12, where deactivated users could access messages if Single Sign-On (SSO) is enabled. The issue is documented across multiple sources (Red Hat, OSV, NVD/CVE record) and is limited to versions prior to 1.3.12; the security impact is that non-active accounts m...

CVE-2016-4427

In zulip before 1.3.12, deactivated users could access messages if SSO was enabled...