CVE-2020-9445

Monday, April 20, 2020

N/A

N/A

Summary

Zulip Server before 2.1.3 allows XSS via the modal_link feature in the Markdown functionality.

Affected Software

Vendor	Product	Version Range	Status
n/a	n/a	`n/a`	affected

Weaknesses

n/a

ADP Enrichment

CVE Program Container

Additional References

https://blog.zulip.org/2020/04/01/zulip-server-2-1-3-security-release/

References

https://blog.zulip.org/2020/04/01/zulip-server-2-1-3-security-release/

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.