Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2020-10857
Disclosure Date: February 05, 2021 (last updated November 28, 2024)
Zulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remote code execution.
0
Attacker Value
Unknown
CVE-2020-10858
Disclosure Date: February 05, 2021 (last updated February 22, 2025)
Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler.
0
Attacker Value
Unknown
CVE-2020-24582
Disclosure Date: September 10, 2020 (last updated February 22, 2025)
Zulip Desktop before 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user interface.
0
Attacker Value
Unknown
CVE-2020-12637
Disclosure Date: May 09, 2020 (last updated February 21, 2025)
Zulip Desktop before 5.2.0 has Missing SSL Certificate Validation because all validation was inadvertently disabled during an attempt to recognize the ignoreCerts option.
0
Attacker Value
Unknown
CVE-2020-9443
Disclosure Date: March 18, 2020 (last updated February 21, 2025)
Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a number of ways. This especially affects Zulip Desktop 2.3.82.
0
