CVE-2020-10935

Description

References

• blog.zulip.org/2020/04/01/zulip-server-2-1-3-security-release · Vendor Advisory
• coresecurity.com/advisories/zulip-account-takeover-stored-xss · Exploit

Más vulnerabilidades de zulip server

• CVE-2026-40300MEDIO 6.5Zulip is an open-source team collaboration tool. Prior to 12.0, With message_edit_history_visibility_policy set to "moves", /api/v1/messages…
• CVE-2026-24050MEDIO 5.4Zulip is an open-source team collaboration tool. From 5.0 to before 11.5, some administrative actions on the user profile were susceptible t…
• CVE-2025-52559MEDIO 5.4Zulip is an open-source team chat application. From versions 2.0.0-rc1 to before 10.4 in Zulip Server, the /digest/ URL of a server shows a …
• CVE-2025-31478ALTO 8.2Zulip is an open-source team collaboration tool. Zulip supports a configuration where account creation is limited solely by being able to au…
• CVE-2025-30369BAJO 2.7Zulip is an open-source team collaboration tool. The API for deleting an organization custom profile field is supposed to be restricted to o…