Security Advisory

CVE-2018-9999

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-04-18 08:00:00

Last updated 2024-08-05 07:32:00

Assigner mitre

CVSS score not scored

State PUBLISHED

In Zulip Server versions before 1.7.2, there was an XSS issue with user uploads and the (default) LOCAL_UPLOADS_DIR storage backend.