critical9.8
CVE-2020-10857
Zulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remote code execution.
Impact
Zulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zulip | Zulip Desktop | before 5.0.0 |