The vulnerability of the “invite_by_admins_only” permission implementation in the Zulip Server group chat application allows a violator to gain unauthorized access to protected information.

The vulnerability of the “invitebyadminsonly” permission implementation in the Zulip Server group chat application is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

PT-2020-2733

Name of the Vulnerable Software and Affected Versions Zulip Server affected versions not specified Description The issue is related to the implementation of the "invite by admins only" feature in the Zulip Server group chat application, which is associated with access control weaknesses...

PT-2017-10697

Name of the Vulnerable Software and Affected Versions Zulip Server versions 1.5.1 and below Description The issue arises from an error in the implementation of the invite by admins only setting in the Zulip group chat application server. This error allows an authenticated user to invite other use...