CVE-2020-9445: XSS
Published Apr 20, 2020
·Updated
Zulip Server before 2.1.3 allows XSS via the modallink feature in the Markdown functionality.
Affected Software
1 affected component
Zulip Server<2.1.3
Event History
Apr 20, 2020
CVE Published
via MITRE·07:51 PM
Data Sourced
via MITRE·07:51 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this Zulip Server vulnerability?
The vulnerability ID for this Zulip Server vulnerability is CVE-2020-9445.
2
What is the title of this Zulip Server vulnerability?
The title of this Zulip Server vulnerability is 'Zulip Server before 2.1.3 allows XSS via the modal_link feature in the Markdown functionality.'
3
What is the severity of CVE-2020-9445?
The severity of CVE-2020-9445 is medium with a CVSS score of 6.1.
4
How does CVE-2020-9445 impact Zulip Server?
CVE-2020-9445 allows cross-site scripting (XSS) attacks via the modal_link feature in the Markdown functionality of Zulip Server version before 2.1.3.
5
How can I fix CVE-2020-9445 in Zulip Server?
To fix CVE-2020-9445 in Zulip Server, you need to upgrade to version 2.1.3 or later.