CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. See the original NVD description below for full technical details.
CVE
CVE-2021-30477
Severity
MEDIUM
CVSS
4.3
EPSS
0.66%
Original NVD Description
An issue was discovered in Zulip Server before 3.4. A bug in the implementation of replies to messages sent by outgoing webhooks to private streams meant that an outgoing webhook bot could be used to send messages to private streams that the user was not intended to be able to send messages to.
Related CVEs
Other vulnerabilities affecting the same vendor(s)