medium5.4
CVE-2018-9999
In Zulip Server versions before 1.7.2, there was an XSS issue with user uploads and the (default) LOCAL_UPLOADS_DIR storage backend.
Impact
In Zulip Server versions before 1.7.2, there was an XSS issue with user uploads and the (default) LOCAL_UPLOADS_DIR storage backend.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zulip | Zulip Server | before 1.7.2 |