Description
In zulip before 1.3.12, deactivated users could access messages if SSO was enabled.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | zulip | zulip 1.3.12 | — |
Unscored
CVE-2016-4427
EUVD-2016-5426GHSA-58ww-8hxm-f99f
In zulip before 1.3.12, deactivated users could access messages if SSO was enabled.
Published Jul 28, 2022 · Updated Aug 6, 2024 · Assigned by redhat