medium6.1
CVE-2020-12759
Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook.
Impact
Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zulip | Zulip Server | before 2.1.5 |