PT-2022-15053 · Unknown · Zulip Server

Alexmv · Published 2022-02-25 · Updated 2023-07-24 · CVE-2022-21706

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Zulip Server versions 2.0.0 through 4.9

Description Zulip is an open-source team collaboration tool with topic-based threading. A Zulip Server deployment which hosts multiple organizations is vulnerable to an attack where an invitation created in one organization can be used to join any other organization. This bypasses any restrictions on required domains on users' email addresses, may be used to gain access to organizations which are only accessible by invitation, and may be used to gain access with elevated privileges.

Recommendations For Zulip Server versions 2.0.0 through 4.9, upgrade to release 4.10 to patch the issue. At the moment, there are no known workarounds for this issue.

Exploit

Fix

Improper Access Control

Incorrect Authorization

Weakness Enumeration

CWE-284

CWE-863

Related Identifiers

CVE-2022-21706

GHSA-6XMJ-2WCM-P2JC

Affected Products

Zulip Server

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/21xxx/CVE-2022-21706.json · Exploit
• https://github.com/zulip/zulip/commit/88917019f03860609114082cdc0f31a561503f9e · Patch
• https://osv.dev/vulnerability/CVE-2022-21706 · Vendor Advisory
• https://blog.zulip.com/2022/02/25/zulip-cloud-invitation-vulnerability · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-21706 · Security Note
• https://blog.zulip.com/2022/02/25/zulip-server-4-10-security-release/#cve-2022-21706 · Vendor Advisory
• https://github.com/zulip/zulip/security/advisories/GHSA-6xmj-2wcm-p2jc · Note
• https://t.me/cvenotify/27419 · Telegram Post
• https://t.me/cibsecurity/38158 · Telegram Post