PT-2022-20554 · Unknown · Zulip Server

Alexmv · Published 2022-07-12 · Updated 2022-07-22 · CVE-2022-31134

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Zulip Server versions 2.1.0 through 5.3

Description Zulip is an open-source team collaboration tool. It has a user interface tool, accessible only to server owners and server administrators, which provides a way to download a "public data" export. However, this export contains the attachment contents for all attachments, even those from private messages and streams, potentially allowing administrators to access private information they are not expected to have access to.

Recommendations For Zulip Server versions 2.1.0 through 5.3, update to version 5.4 to resolve the issue.

Exploit

Fix

Information Disclosure

Unrestricted File Upload

Weakness Enumeration

CWE-200

CWE-434

Related Identifiers

CVE-2022-31134

GHSA-58PM-88XP-7X9M

Affected Products

Zulip Server

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31134.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-31134 · Vendor Advisory
• https://blog.zulip.com/2022/07/12/zulip-cloud-data-exports · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31134 · Security Note
• https://blog.zulip.com/2022/07/12/zulip-server-5-4-security-release · Vendor Advisory
• https://github.com/zulip/zulip/security/advisories/GHSA-58pm-88xp-7x9m · Note
• https://t.me/cibsecurity/46094 · Telegram Post