| Package | Affected versions | Patched versions |
|---|---|---|
| zulip server | < 1.7.2 | 1.7.2 |
In Zulip Server versions before 1.7.2, there was an XSS issue with user uploads and the (default) LOCAL_UPLOADS_DIR storage backend.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free