PT-2020-13940

Name of the Vulnerable Software and Affected Versions Zulip Server versions prior to 2.1.5 Description The issue is related to Incorrect Access Control. Specifically, the 0198 preregistrationuser invited as addition grants the administrator role to invitations, which is not intended...