Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2024-36624
Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the construct_copy_div function in copy_and_paste.js.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.001
EPSS Ranking
25.9%
CVSS Severity
CVSS v3 Score
5.4
References
https://gist.github.com/1047524396/64720d2aa5afd943eb7e5a1ed4808ad6
https://github.com/zulip/zulip/blob/8.3/web/src/copy_and_paste.js#L90
https://github.com/zulip/zulip/commit/e1029b59ede0c4f314c367ffa1ba2904ffaf6768
Products affected by CVE-2024-36624
Zulip
»
Zulip
»
Version:
8.3
cpe:2.3:a:zulip:zulip:8.3
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved