Zulip Server vulnerabilities
2 known vulnerabilities in Zulip Server from Zulip. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
1critical
1high
0exploited
9.0average CVSS score
Latest first
- 8.2 High severity
zulip: Improper Authentication
Zulip is an open-source team collaboration tool. Zulip supports a configuration where account creation is limited solely by being able to authenticate with a single-sign on authentication backend, meaning the organization places no restrictions on email addres
- 9.8 Critical severity
zulip: Improper Access Control
Zulip is an open-source team collaboration tool with topic-based threading. Zulip Server version 2.0.0 and above are vulnerable to insufficient access control with multi-use invitations. A Zulip Server deployment which hosts multiple organizations is vulnerabl