CVE-2018-9986

In Zulip Server versions before 1.7.2, there were XSS issues with the frontend markdown processor...

CVE-2018-9986

Summary: CVE-2018-9986 affects Zulip Server prior to 1.7.2, where the frontend markdown processor allows cross-site scripting (XSS). What’s affected: Zulip Server versions before 1.7.2; vulnerable component is the frontend markdown processor used for rendering content. Impact (as described): An a...