CVE-2021-30487: Medium severity zulip server vulnerability
Published Apr 14, 2021
·Updated
In the topic moving API in Zulip Server 3.x before 3.4, organization administrators were able to move messages to streams in other organizations hosted by the same Zulip installation.
Affected Software
1 affected component
Zulip Server>=3.0<3.4
Event History
Apr 14, 2021
CVE Published
via MITRE·11:43 PM
Data Sourced
via MITRE·11:43 PM
Description
Frequently Asked Questions
1
What is CVE-2021-30487?
CVE-2021-30487 is a vulnerability in Zulip Server 3.x before 3.4 that allows organization administrators to move messages to streams in other organizations hosted by the same Zulip installation.
2
How severe is CVE-2021-30487?
CVE-2021-30487 has a severity level of medium (2.7).
3
How can I fix CVE-2021-30487?
To fix CVE-2021-30487, upgrade your Zulip Server to version 3.4 or later.
4
Where can I find more information about CVE-2021-30487?
You can find more information about CVE-2021-30487 on the Zulip Server blog: https://blog.zulip.com/2021/04/14/zulip-server-3-4/