PT-2022-10745 · Zulip · Zulip

Abdul Muhaimin · Published 2022-01-20 · Updated 2022-02-03 · CVE-2021-3866

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions zulip/zulip versions 44f935695d452cc3fb16845a0c6af710438b153d through 3eb2791c3e9695f7d37ffe84e0c2184fae665cb6

Description The issue is related to Cross-site Scripting (XSS) - Stored, which affects the GitHub repository zulip/zulip. This type of attack occurs when an application stores user input that contains malicious scripts, which are then executed by the application, allowing an attacker to perform unauthorized actions.

Recommendations For versions 44f935695d452cc3fb16845a0c6af710438b153d through 3eb2791c3e9695f7d37ffe84e0c2184fae665cb6, update to a version after 3eb2791c3e9695f7d37ffe84e0c2184fae665cb6 to resolve the issue. As a temporary workaround, consider restricting user input to prevent the storage of malicious scripts until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-3866

Affected Products

Zulip

References · 8

• 🔥 https://huntr.dev/bounties/5f48dac5-e112-4b23-bbbf-cc00ba83bcf2 · Exploit
• https://github.com/zulip/zulip/commit/3eb2791c3e9695f7d37ffe84e0c2184fae665cb6 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-3866 · Security Note
• https://blog.zulip.com/2022/01/19/cve-2021-3866 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-3866 · Vendor Advisory
• https://t.me/cvenotify/26019 · Telegram Post
• https://t.me/cibsecurity/35914 · Telegram Post
• https://t.me/cvenotify/25714 · Telegram Post