5 matches found
CVE-2020-14215
Zulip Server before 2.1.5 has Incorrect Access Control because 0198preregistrationuserinvitedas adds the administrator role to invitations...
CVE-2020-14215
Zulip Server before 2.1.5 has Incorrect Access Control because 0198preregistrationuserinvitedas adds the administrator role to invitations...
CVE-2020-14215
Zulip Server before 2.1.5 has Incorrect Access Control because 0198preregistrationuserinvitedas adds the administrator role to invitations...
CVE-2020-14215
CVE-2020-14215 affects Zulip Server up to version 2.1.4 (fixed in 2.1.5). Root cause: the 0198_preregistrationuser_invited_as logic adds the administrator role to invite objects, enabling insufficient access control. Impact: potential elevation of privileges via invitations, with impact to confid...
