CVE-2020-9445

Zulip Server before 2.1.3 allows XSS via the modallink feature in the Markdown functionality...

Zulip server Markdown parser cross-site scripting vulnerability

Zulip server is an open source team chat application from Zulip Inc.Markdown parser is one of the Markdown markup language parser. A cross-site scripting vulnerability exists in the modallink function of Markdown parser in Zulip Server versions prior to 2.1.3. The vulnerability stems from a lack ...

CVE-2020-9445

Zulip Server before 2.1.3 allows XSS via the modallink feature in the Markdown functionality...

PT-2020-20665

Name of the Vulnerable Software and Affected Versions Zulip Server versions prior to 2.1.3 Description The issue allows for XSS via the modal link feature in the Markdown functionality. Recommendations For versions prior to 2.1.3, update to version 2.1.3 or later to resolve the issue...