Zulipchat Zulip Desktop — known CVE vulnerabilities

Every CVE whose affected-product data names Zulipchat Zulip Desktop, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2020-12637 — CVSS 9.8 (critical): Zulip Desktop before 5.2.0 has Missing SSL Certificate Validation because all validation was inadvertently disabled during an attempt to…
• CVE-2020-24582 — CVSS 6.1 (medium): Zulip Desktop before 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user interface.
• CVE-2020-9443 — CVSS 6.1 (medium): Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a…