Zulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remote code execution.

Published Feb 5, 2021 · Updated Aug 4, 2024 · Assigned by mitre