CVE-2017-0896 | BDVDB-2026-86030 Detail

Description#

Zulip Server 1.5.1 and below suffer from an error in the implementation of the invite_by_admins_only setting in the Zulip group chat application server that allowed an authenticated user to invite other users to join a Zulip organization even if the organization was configured to prevent this.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12017-06-02Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.