CVE-2016-4427

In zulip before 1.3.12, deactivated users could access messages if SSO was enabled.

Score

CVSS 3.1 7.5 High

Status

Modified - secalert@redhat.com

Published

2022-07-28

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Zulip (Zulip)

References

• https://zulip.readthedocs.io/en/2.1.7/overview/changelog.html#id35