CVE-2020-10935

Zulip Server before 2.1.3 allows XSS via a Markdown link, with resultant account takeover

published April 20, 2020

CVSS
—
EPSS
1%
Percentile
53.5
In the wild
Unconfirmed
What it is

Zulip Server before 2.1.3 allows XSS via a Markdown link, with resultant account takeover.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00723 · 53.5th percentile
Published
2020-04-20T19:47Z
EPSS history
Timeline
  • 20 APR 19:47Z
    Zulip Server before 2.1.3 allows XSS via a Markdown link, with resultant account takeover
    cvelistv5