CVE-2017-0910
N/A
N/A
Summary
In Zulip Server before 1.7.1, on a server with multiple realms, a vulnerability in the invitation system lets an authorized user of one realm on the server create a user account on any other realm.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Zulip | Zulip Server | before 1.7.1 | affected |
Weaknesses
- CWE-863: Incorrect Authorization (CWE-863)
ADP Enrichment
CVE Program Container
Additional References
- https://github.com/zulip/zulip/commit/960d736e55cbb9386a68e4ee45f80581fd2a4e32
- http://blog.zulip.org/2017/11/23/zulip-1-7-1-released/
References
- https://github.com/zulip/zulip/commit/960d736e55cbb9386a68e4ee45f80581fd2a4e32
- http://blog.zulip.org/2017/11/23/zulip-1-7-1-released/
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.