Vulnerabilities > Zulip > Zulip Server > 2.1.2

DATE CVE VULNERABILITY TITLE RISK
2024-01-25 CVE-2024-21630 Missing Authorization vulnerability in Zulip Server
Zulip is an open-source team collaboration tool.
network
low complexity
zulip CWE-862
4.3
2023-11-16 CVE-2023-47642 Unspecified vulnerability in Zulip Server
Zulip is an open-source team collaboration tool.
network
low complexity
zulip
4.3
2023-08-25 CVE-2023-32678 Improper Authorization vulnerability in Zulip Server
Zulip is an open-source team collaboration tool with topic-based threading that combines email and chat.
network
low complexity
zulip CWE-285
6.5
2022-07-12 CVE-2022-31134 Unrestricted Upload of File with Dangerous Type vulnerability in Zulip Server
Zulip is an open-source team collaboration tool.
network
low complexity
zulip CWE-434
4.0
2022-02-26 CVE-2022-21706 Unspecified vulnerability in Zulip Server
Zulip is an open-source team collaboration tool with topic-based threading.
network
low complexity
zulip
critical
9.8
2021-04-15 CVE-2021-30479 Improper Privilege Management vulnerability in Zulip Server
An issue was discovered in Zulip Server before 3.4.
network
low complexity
zulip CWE-269
5.0
2021-04-15 CVE-2021-30478 Improper Privilege Management vulnerability in Zulip Server
An issue was discovered in Zulip Server before 3.4.
network
low complexity
zulip CWE-269
4.0
2021-04-15 CVE-2021-30477 Unspecified vulnerability in Zulip Server
An issue was discovered in Zulip Server before 3.4.
network
low complexity
zulip
4.0
2020-08-21 CVE-2020-15070 Injection vulnerability in Zulip Server
Zulip Server 2.x before 2.1.7 allows eval injection if a privileged attacker were able to write directly to the postgres database, and chose to write a crafted custom profile field value.
network
low complexity
zulip CWE-74
6.5
2020-08-21 CVE-2020-14215 Incorrect Authorization vulnerability in Zulip Server
Zulip Server before 2.1.5 has Incorrect Access Control because 0198_preregistrationuser_invited_as adds the administrator role to invitations.
network
low complexity
zulip CWE-863
5.0