CVE-2018-9986: XSS
Published Apr 18, 2018
·Updated
In Zulip Server versions before 1.7.2, there were XSS issues with the frontend markdown processor.
Affected Software
1 affected component
Zulip Server<1.7.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Zulip Serverto a version that resolves this vulnerability.Fixed in 1.7.2
Event History
Apr 18, 2018
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Data Sourced
via NVD·08:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-9986?
The severity of CVE-2018-9986 is medium with a CVSS score of 6.1.
2
What is the affected software for CVE-2018-9986?
The affected software for CVE-2018-9986 is Zulip Server versions before 1.7.2.
3
What is the vulnerability description of CVE-2018-9986?
CVE-2018-9986 is a Cross-Site Scripting (XSS) vulnerability in Zulip Server versions before 1.7.2.
4
How can I fix CVE-2018-9986?
To fix CVE-2018-9986, you should upgrade to Zulip Server version 1.7.2 or later.
5
Where can I find more information about CVE-2018-9986?
You can find more information about CVE-2018-9986 at the following link: [https://blog.zulip.org/2018/04/12/zulip-1-7-2-released/](https://blog.zulip.org/2018/04/12/zulip-1-7-2-released/)