Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2021-30479

Опубликовано: 15 апр. 2021
Источник: debian
EPSS Низкий

Описание

An issue was discovered in Zulip Server before 3.4. A bug in the implementation of the all_public_streams API feature resulted in guest users being able to receive message traffic to public streams that should have been only accessible to members of the organization.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
zulip-serveritppackage

EPSS

Процентиль: 42%
0.00203
Низкий

Связанные уязвимости

CVSS3: 5.3
nvd
почти 5 лет назад

An issue was discovered in Zulip Server before 3.4. A bug in the implementation of the all_public_streams API feature resulted in guest users being able to receive message traffic to public streams that should have been only accessible to members of the organization.

CVSS3: 5.3
github
больше 3 лет назад

An issue was discovered in Zulip Server before 3.4. A bug in the implementation of the all_public_streams API feature resulted in guest users being able to receive message traffic to public streams that should have been only accessible to members of the organization.

EPSS

Процентиль: 42%
0.00203
Низкий