CVE-2020-12759 - Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook

MEDIUM

Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook

Published Aug 21, 2020

6.1

MEDIUM

CVSS 3.1

EPSS 0.67%

Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://blog.zulip.com/2020/06/17/zulip-server-2-1-5-security-release/		x_refsource_CONFIRMRelease NotesVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Aug 21, 2020

Updated Aug 4, 2024

Reserved May 9, 2020

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a