Zulip Desktop Remote Code Execution Vulnerability

Zulip is a powerful open source group chat application that combines the immediacy of live chat with the productivity benefits of threaded conversations.Zulip Desktop is the Zulip desktop client. A remote code execution vulnerability exists in Zulip Desktop versions prior to 5.0.0. The...

CVE-2020-10857

Zulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remote code execution...

CVE-2020-10857

Zulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remote code execution...

CVE-2020-10857

Zulip Desktop (Windows/macOS/Linux) has a remote code execution vulnerability in all versions before 5.0.0. The issue stems from improper use of shell.openExternal and shell.openItem with untrusted content, which can allow an attacker to execute arbitrary code on the user’s system. The Red Hat an...

PT-2021-9176

Name of the Vulnerable Software and Affected Versions Zulip Desktop versions prior to 5.0.0 Description The issue is related to the improper use of shell.openExternal and shell.openItem with untrusted content, leading to remote code execution. Recommendations For versions prior to 5.0.0, update t...

CVE-2020-10857: Undefined Security Weakness

Zulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remote code execution...