Description
Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a number of ways. This especially affects Zulip Desktop 2.3.82.
Unscored
CVE-2020-9443
EUVD-2020-30263GHSA-mmgh-298q-2qxp
Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a …
Published Mar 18, 2020 · Updated Aug 4, 2024 · Assigned by mitre