Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r3hv-m3j5-mrfp

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

An issue was discovered in Zulip Server before 3.4. A bug in the implementation of the all_public_streams API feature resulted in guest users being able to receive message traffic to public streams that should have been only accessible to members of the organization.

An issue was discovered in Zulip Server before 3.4. A bug in the implementation of the all_public_streams API feature resulted in guest users being able to receive message traffic to public streams that should have been only accessible to members of the organization.

EPSS

Процентиль: 42%
0.00203
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 5.3
nvd
почти 5 лет назад

An issue was discovered in Zulip Server before 3.4. A bug in the implementation of the all_public_streams API feature resulted in guest users being able to receive message traffic to public streams that should have been only accessible to members of the organization.

CVSS3: 5.3
debian
почти 5 лет назад

An issue was discovered in Zulip Server before 3.4. A bug in the imple ...

EPSS

Процентиль: 42%
0.00203
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-732