In zulip before 1.3.12, deactivated users could access messages if SSO was enabled.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NZulip
APPZulip< 1.3.12
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2022-35962HIGH8.0ten sam produkt
Zulip is an open source team chat and Zulip Mobile is an app for iOS and Andriod users. In Zulip Mobile throug...
CVE-2021-3967HIGH8.8ten sam produkt
Improper Access Control in GitHub repository zulip/zulip prior to 4.10.
CVE-2021-43799HIGH8.6ten sam produkt
Zulip is an open-source team collaboration tool. Zulip Server installs RabbitMQ for internal message passing. ...
CVE-2026-25742MEDIUM5.3ten sam produkt
Zulip is an open-source team collaboration tool. Prior to version 11.6, Zulip is an open-source team collabora...
CVE-2026-26058MEDIUM6.1ten sam produkt
Zulip is an open-source team collaboration tool. From version 1.4.0 to before version 11.6, ./manage.py import...