CVE-2021-3866

Description

References

• blog.zulip.com/2022/01/19/cve-2021-3866 · Vendor Advisory
• zulip/zulip commit 3eb2791 · Patch
• huntr.dev/bounties/5f48dac5-e112-4b23-bbbf-cc00ba83bcf2 · Exploit

Weitere Schwachstellen in zulip

• CVE-2026-26058MITTEL 6.1Zulip is an open-source team collaboration tool. From version 1.4.0 to before version 11.6, ./manage.py import reads arbitrary files from th…
• CVE-2026-25742MITTEL 5.3Zulip is an open-source team collaboration tool. Prior to version 11.6, Zulip is an open-source team collaboration tool. From version 1.4.0 …
• CVE-2025-47930MITTEL 5.3Zulip is an open-source team chat application. Starting in version 10.0 and prior to version 10.3, the "Who can create public channels" acce…
• CVE-2025-30368NIEDRIG 2.7Zulip is an open-source team collaboration tool. The API for deleting an organization export is supposed to be restricted to organization ad…
• CVE-2024-36624MITTEL 5.4Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the construct_copy_div function in copy_and_paste.js.