CVE-2024-36624 - Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the construct_copy_div function in copy_and_paste.js

MEDIUM

Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the construct_copy_div function in copy_and_paste.js

Published Nov 29, 2024

6.1

MEDIUM

CVSS 3.1

EPSS 0.39%

Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the construct_copy_div function in copy_and_paste.js.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-36346		Advisory
https://gist.github.com/1047524396/64720d2aa5afd943eb7e5a1ed4808ad6		PatchThird Party Advisory
https://github.com/zulip/zulip/blob/8.3/web/src/copy_and_paste.js#L90		Product
https://github.com/zulip/zulip/commit/e1029b59ede0c4f314c367ffa1ba2904ffaf6768		Patch

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 29, 2024

Updated Nov 29, 2024

Reserved May 30, 2024

CISA Vulnrichment

Updated Nov 29, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Nov 29, 2024

Updated Nov 29, 2024

GitHub

No data