CVE-2021-30479

An issue was discovered in Zulip Server before 3.4. A bug in the implementation of the allpublicstreams API feature resulted in guest users being able to receive message traffic to public streams that should have been only accessible to members of the organization...

CVE-2021-30479

An issue was discovered in Zulip Server before 3.4. A bug in the implementation of the allpublicstreams API feature resulted in guest users being able to receive message traffic to public streams that should have been only accessible to members of the organization...

CVE-2021-30479

CVE-2021-30479 affects Zulip Server prior to 3.4, where a bug in the all_public_streams API allowed guest users to receive message traffic from public streams that should be restricted to organization members. This could enable unintended exposure of public-stream content to non-members. Multiple...