| Package | Affected versions | Patched versions |
|---|---|---|
| zulip server | ≥ 1.9.0, < 2.0.8 | 2.0.8 |
The image thumbnailing handler in Zulip Server versions 1.9.0 to before 2.0.8 allowed an open redirect that was visible to logged-in users.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free