CVE-2020-12637

概要

参考情報

• blog.zulip.org/2020/05/06/zulip-desktop-5-2-0-security-release · Vendor Advisory

zulip desktop のその他の脆弱性

• CVE-2020-24582中 6.1Zulip Desktop before 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user interface.
• CVE-2020-9443中 6.1Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a n…