漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
In Zulip Server versions from 1.7.0 to before 2.0.7, a bug in the new user signup process meant that users who registered their account using social authentication (e.g., GitHub or Google SSO) in an organization that also allows password authentication could have their personal API key stolen by an unprivileged attacker, allowing nearly full access to the user's account.
漏洞信息
N/A
漏洞
N/A
漏洞
Zulip server 授权问题漏洞
漏洞信息
Zulip server是美国Zulip公司的一款开源的团队聊天应用程序。 Zulip server 1.7.0及之后版本(2.0.7版本已修复)中的新用户注册进程存在安全漏洞。攻击者可利用该漏洞几乎获取用户账户的全部访问权限。
漏洞信息
N/A
漏洞
N/A