Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2024-36625
Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the replace_emoji_with_text function in ui_util.ts.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.001
EPSS Ranking
25.9%
CVSS Severity
CVSS v3 Score
5.4
References
https://gist.github.com/1047524396/f7ada389ed2686481efef9e1f8307c51
https://github.com/zulip/zulip/blob/8.3/web/src/ui_util.ts#L24
https://github.com/zulip/zulip/commit/191345f9d61f5b15762fe3ce19bf635bf885176a
Products affected by CVE-2024-36625
Zulip
»
Zulip
»
Version:
8.3
cpe:2.3:a:zulip:zulip:8.3
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved