CVE-2020-24582

Zulip Desktop before 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user interface

published September 10, 2020

CVSS
—
EPSS
1%
Percentile
52.0
In the wild
Unconfirmed
What it is

Zulip Desktop before 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user interface.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00685 · 52.0th percentile
Published
2020-09-10T16:11Z
EPSS history
Timeline
  • 10 SEP 16:11Z
    Zulip Desktop before 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user interface
    cvelistv5