Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Zulip Server before 3.4. A bug in the implementation of the can_forge_sender permission (previously is_api_super_user) resulted in users with this permission being able to send messages appearing as if sent by a system bot, including to other organizations hosted by the same Zulip installation.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Zulip 访问控制错误漏洞
Vulnerability Description
Zulip是Zulip团队的一款功能强大的开源群聊应用程序。用于将实时聊天的即时性与线程对话的生产力优势相结合。 Zulip Server 3.4之前版本存在访问控制错误漏洞，该漏洞导致具有此权限的用户能够发送消息，就像发送给系统机器人一样。
CVSS Information
N/A
Vulnerability Type
N/A