ZS
Product
Zulip Server
40
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 29Low 4
Watch
Add Zulip Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-15070 | 8.8 | Aug 21 | Zulip Server 2.x before 2.1.7 allows eval injection if a privileged attacker were able to write directly to the postgres database, and chose to write a crafted custom profile… Affected: before 2.1.7 |
| CVE-2017-0910 | 8.8 | Nov 27 | In Zulip Server before 1.7.1, on a server with multiple realms, a vulnerability in the invitation system lets an authorized user of one realm on the server create a user account… Affected: before 1.7.1 |
| CVE-2025-31478 | 8.2 | Apr 16 | Zulip Authentication Backend Configuration Bypass Affected: before 10.2 |
| CVE-2024-36612 | 7.5 | Nov 29 | Zulip from 8.0 to 8.3 contains a memory leak vulnerability in the handling of popovers Affected: 8.0 through 8.3 |
| CVE-2020-14215 | 7.5 | Aug 21 | Zulip Server before 2.1.5 has Incorrect Access Control because 0198_preregistrationuser_invited_as adds the administrator role to invitations Affected: before 2.1.5 |
Showing 5