CVE-2021-3967: Improper Access Control in zulip/zulip
Published Feb 26, 2022
·Updated
Improper Access Control in GitHub repository zulip/zulip prior to 4.10.
Affected Software
1 affected component
Zulip zulip<4.10
Remediation
Event History
Feb 26, 2022
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-3967?
CVE-2021-3967 refers to an Improper Access Control vulnerability in the GitHub repository of Zulip prior to version 4.10.
2
What is the severity of CVE-2021-3967?
CVE-2021-3967 has a severity score of 8.8 (high).
3
How does CVE-2021-3967 affect Zulip?
CVE-2021-3967 affects the Zulip software prior to version 4.10.
4
How can I fix CVE-2021-3967?
To fix CVE-2021-3967, update Zulip to version 4.10 or later.
5
Where can I find more information about CVE-2021-3967?
You can find more information about CVE-2021-3967 in the references provided: [1](https://github.com/zulip/zulip/commit/d5db254ca8167995a1654d1c45ffc74b2fade39a), [2](https://huntr.dev/bounties/2928a625-0467-4a0a-b4e2-e27322786686).