NetSight
medium6.1

CVE-2018-9990

In Zulip Server versions before 1.7.2, there was an XSS issue with stream names in topic typeahead.

Impact

In Zulip Server versions before 1.7.2, there was an XSS issue with stream names in topic typeahead.

Affected products

VendorProductAffected versions
ZulipZulip Server
before 1.7.2

Weakness classification

References