3 matches found
CVE-2020-10935
Zulip Server before 2.1.3 allows XSS via a Markdown link, with resultant account takeover.
CVE-2020-9444
Zulip Server before 2.1.3 allows reverse tabnabbing via the Markdown functionality.
CVE-2020-9445
Zulip Server before 2.1.3 allows XSS via the modal_link feature in the Markdown functionality.