Zulip vulnerabilities
42 CVEs and advisories name Zulip as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-31134Zulip Server public data export contains attachments that are non-public
- CVE-2022-31017Expression Always True vulnerability in Zulip Server
- CVE-2022-24751Race condition in Zulip
- CVE-2022-23656Cross-site scripting vulnerability in Zulip Server
- CVE-2021-3967Improper Access Control in zulip/zulip
- CVE-2022-21706Multi-use invitations can grant access to other organizations in Zulip
- CVE-2021-43799RabbitMQ exposes ports with weak default secrets in Zulip Server
- CVE-2021-3866Cross-site Scripting (XSS) - Stored in zulip/zulip
- CVE-2021-43791Ineffective expiration validation for invitation links in Zulip
- CVE-2021-41115Regular expression denial-of-service in Zulip
- CVE-2017-0910In Zulip Server before 1.7.1, on a server with multiple realms, a vulnerability in the invitation system lets an authorized user of one real
- CVE-2017-0896Zulip Server 1.5.1 and below suffer from an error in the implementation of the invite_by_admins_only setting in the Zulip group chat applica