CVEvulnerability
CVE-2021-30487
2.7 LOW
Official page ↗
- Status
- Modified
- Published
- 2021-04-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
Description
In the topic moving API in Zulip Server 3.x before 3.4, organization administrators were able to move messages to streams in other organizations hosted by the same Zulip installation.
Affected configurations
• zulip zulip server (>= 3.0 < 3.4)
References
- https://blog.zulip.com/2021/04/14/zulip-server-3-4/ Release Notes, Vendor Advisory
- https://blog.zulip.com/2021/04/14/zulip-server-3-4/ Release Notes, Vendor Advisory