PT-2019-15951 · Zulip · Zulip Server

Graham Bleaney + 1 · Publicado 2019-12-18 · Atualizado 2019-12-18 · CVE-2019-19775

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Zulip Server versions 1.9.0 through 2.0.7

Description The issue concerns an open redirect in the image thumbnailing handler, which is visible to logged-in users.

Recommendations For Zulip Server versions 1.9.0 through 2.0.7, update to version 2.0.8 or later to resolve the issue.

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2019-19775

Produtos afetados

Zulip Server

Referências · 4

• https://github.com/zulip/zulip/commit/b7c87a4d82397a5e6ac169b6098bed0b1ae7a583 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2019-19775 · Nota de Segurança
• https://blog.zulip.org/2019/12/13/zulip-server-2-0-8-security-release · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-19775 · Aviso do Fabricante