zulip

Records69All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

zulip records in CISA KEV

No zulip vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Zulip Desktop · all components

TI-2020-08743 CVE-2020-10857 · GHSA-7fjh-g2fp-mqf5

MEDIUM 48

Zulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0317 Published 2021-02-05 No fix listed

TI-2020-08744 CVE-2020-10858 · GHSA-wrq6-7947-r2fc

LOW 26

Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01086 Published 2021-02-05 No fix listed CWE-862