CVE-2020-15070 | BDVDB-2026-140478 Detail

Description#

Zulip Server 2.x before 2.1.7 allows eval injection if a privileged attacker were able to write directly to the postgres database, and chose to write a crafted custom profile field value.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12020-08-21Record published in the CVE List.
2. Version 22024-08-04Most recent update recorded in the CVE List.