Lucene search
+L

6 matches found

NVD
NVD
•added 2024/11/29 5:15 p.m.•43 views

CVE-2024-36625

Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the replaceemojiwithtext function in uiutil.ts...

5.4CVSS0.00389EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/11/29 12:00 a.m.•18 views

CVE-2024-36625

Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the replaceemojiwithtext function in uiutil.ts...

6AI score0.00389EPSS
SaveExploits0References3
CVE
CVE
•added 2024/11/29 12:00 a.m.•90 views

CVE-2024-36625

Zulip version 8.3 is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. The root cause is located in the replace_emoji_with_text function within the ui_util.ts file. This vulnerability allows for the execution of malicious scripts in a use...

5.4CVSS5.8AI score0.00389EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2024/11/29 12:00 a.m.•8 views

CVE-2024-36625

Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the replaceemojiwithtext function in uiutil.ts...

5.4CVSS0.00389EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/29 12:00 a.m.•6 views

CVE-2024-36625: Improper Neutralization of Input During Web Page Generation

Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the replaceemojiwithtext function in uiutil.ts...

5.4CVSS5.8AI score0.00389EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/29 12:00 a.m.•45 views

CVE-2024-36625

Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the replaceemojiwithtext function in uiutil.ts...

0.00389EPSS
SaveExploits0References3
Rows per page
Query Builder