Description
In zulip before 1.3.12, bot API keys were accessible to other users in the same realm.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | zulip | zulip 1.3.12 | — |
Unscored
CVE-2016-4426
EUVD-2016-5425GHSA-xv4m-3w46-f9wh
In zulip before 1.3.12, bot API keys were accessible to other users in the same realm.
Published Jul 28, 2022 · Updated Aug 6, 2024 · Assigned by redhat