CVE-2019-19775: Medium severity zulip server vulnerability
Published Dec 18, 2019
·Updated
The image thumbnailing handler in Zulip Server versions 1.9.0 to before 2.0.8 allowed an open redirect that was visible to logged-in users.
Affected Software
1 affected component
Zulip Server>=1.9.0<2.0.8
Remediation
Event History
Dec 18, 2019
CVE Published
via MITRE·03:27 AM
Data Sourced
via MITRE·03:27 AM
Description
Frequently Asked Questions
1
What is CVE-2019-19775?
CVE-2019-19775 is a vulnerability in the image thumbnailing handler in Zulip Server versions 1.9.0 to before 2.0.8 that allowed an open redirect.
2
How does CVE-2019-19775 affect Zulip Server?
CVE-2019-19775 affects Zulip Server versions 1.9.0 to before 2.0.8.
3
What is the severity of CVE-2019-19775?
CVE-2019-19775 has a severity level of medium with a CVSS score of 6.1.
4
How can I fix CVE-2019-19775?
To fix CVE-2019-19775, it is recommended to update Zulip Server to version 2.0.8 or later.
5
Where can I find more information about CVE-2019-19775?
More information about CVE-2019-19775 can be found in the Zulip Blog and the Zulip GitHub repository.