CVE-2020-24582

MEDIUM 6.1CVE-2020-24582 · Published 10/09/2020 · updated 17/06/2026

In short

CVE-2020-24582 is a MEDIUM (CVSS 6.1) vulnerability affecting zulip desktop (zulipchat).
Chance of exploitation in the next 30 days (EPSS): 0.69%, higher than 52.8% of all vulnerabilities.
Fix: update to 5.4.3 or later.

Package	Affected versions	Patched versions
zulip desktop zulipchat	`< 5.4.3`	`5.4.3`

Zulip Desktop before 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user interface.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.