Description
Zulip Server before 2.1.5 has Incorrect Access Control because 0198_preregistrationuser_invited_as adds the administrator role to invitations.
Unscored
CVE-2020-14215
EUVD-2020-6368GHSA-cwgg-2v4v-j88m
Zulip Server before 2.1.5 has Incorrect Access Control because 0198_preregistrationuser_invited_as adds the administrator role to invitatio…
Published Aug 21, 2020 · Updated Aug 4, 2024 · Assigned by mitre