CVE-2017-0896CWE-285

Zulip Server 1.5.1 and below suffer from an error in the implementation of the invite_by_admins_only setting in the Zulip group chat application server that…

published June 2, 2017

CVSS
—
EPSS
1%
Percentile
69.6
In the wild
Unconfirmed
What it is

Zulip Server 1.5.1 and below suffer from an error in the implementation of the invite_by_admins_only setting in the Zulip group chat application server that allowed an authenticated user to invite other users to join a Zulip organization even if the organization was configured to prevent this.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01278 · 69.6th percentile
Weakness
CWE-285 · Improper Authorization
Published
2017-06-02T17:00Z
EPSS history
Timeline
  • 02 JUN 17:00Z
    Zulip Server 1.5.1 and below suffer from an error in the implementation of the invite_by_admins_only setting in the Zulip group chat application server that…
    cvelistv5