Security Advisory
CVE-2018-9999
5.4
MEDIUM
Vulnerability Description
In Zulip Server versions before 1.7.2, there was an XSS issue with user uploads and the (default) LOCAL_UPLOADS_DIR storage backend.
Published Date
April 18, 2018
Official Source
NIST NVD Advisory