CVE-2021-30487

2021-04-1423:43:01

mitre

www.cve.org

cve-2021-30487

zulip server

organization administrators

messages

streams

vulnerability

AI Score

4.2

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

In the topic moving API in Zulip Server 3.x before 3.4, organization administrators were able to move messages to streams in other organizations hosted by the same Zulip installation.

References

blog.zulip.com/2021/04/14/zulip-server-3-4/