high7.5
CVE-2020-14215
Zulip Server before 2.1.5 has Incorrect Access Control because 0198_preregistrationuser_invited_as adds the administrator role to invitations.
Impact
Zulip Server before 2.1.5 has Incorrect Access Control because 0198_preregistrationuser_invited_as adds the administrator role to invitations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zulip | Zulip Server | before 2.1.5 |