CVE-2020-9443

Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a number of ways

published March 18, 2020

CVSS
—
EPSS
1%
Percentile
50.1
In the wild
Unconfirmed
What it is

Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a number of ways. This especially affects Zulip Desktop 2.3.82.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00641 · 50.1th percentile
Published
2020-03-18T12:20Z
EPSS history
Timeline
  • 18 MAR 12:20Z
    Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a number of ways
    cvelistv5