| Package | Affected versions | Patched versions |
|---|---|---|
| zulip server | = 1.3.0= 1.3.1= 1.3.10= 1.3.11= 1.3.12= 1.3.13= 1.3.2= 1.3.3= 1.3.4= 1.3.6= 1.3.7= 1.3.8= 1.3.9= 1.4.0= 1.4.1= 1.4.2= 1.4.3= 1.5.0= 1.5.1 |
Zulip Server 1.5.1 and below suffer from an error in the implementation of the invite_by_admins_only setting in the Zulip group chat application server that allowed an authenticated user to invite other users to join a Zulip organization even if the organization was configured to prevent this.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free