Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook.

Published Aug 21, 2020 · Updated Aug 4, 2024 · Assigned by mitre