CVE-2024-36625: XSS
Published Nov 29, 2024
·Updated
Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the replaceemojiwithtext function in uiutil.ts.
Affected Software
2 affected components
Zulip zulip
Zulip zulip=8.3
Remediation
Event History
Nov 29, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-36625?
CVE-2024-36625 is classified as a high-severity vulnerability due to its potential to allow Cross Site Scripting (XSS) attacks.
2
How do I fix CVE-2024-36625?
To remediate CVE-2024-36625, update to the latest version of Zulip, which addresses the XSS vulnerability.
3
What software is affected by CVE-2024-36625?
CVE-2024-36625 affects Zulip 8.3 and potentially earlier versions.
4
What type of vulnerability is CVE-2024-36625?
CVE-2024-36625 is a Cross Site Scripting (XSS) vulnerability.
5
Where in the codebase does CVE-2024-36625 occur?
CVE-2024-36625 arises from the replace_emoji_with_text function in the ui_util.ts file.