CVE-2021-30487

Published: Apr 15, 2021Modified: Nov 21, 2024

2.7

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Exploitability: 1.2 / Impact: 1.4

Source: NVD

Description

In the topic moving API in Zulip Server 3.x before 3.4, organization administrators were able to move messages to streams in other organizations hosted by the same Zulip installation.

Affected (1)

Products: Zulip: Zulip Server

Zulip

1 product

Zulip Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Zulip Zulip Server	From 3.0 to 3.4

References (2)

https://blog.zulip.com/2021/04/14/zulip-server-3-4/

Source: cve@mitre.org

Release NotesVendor Advisory

https://blog.zulip.com/2021/04/14/zulip-server-3-4/

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

Timeline

No history available yet.