CVE-2026-24050 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Zulip is an open-source team collaboration tool. From 5.0 to before 11.5, some administrative actions on the user profile were susceptible to stored XSS in grou…
Low CVSS: 1.1

CVE-2026-24050

Zulip is an open-source team collaboration tool. From 5.0 to before 11.5, some administrative actions on the user profile were susceptible to stored XSS in group names or channel names. Exploiting these vulnerabilities required the user explicitly interacting with the problematic object. This vulnerability is fixed in 11.5.
Vendor
Zulip
Product
Zulip Server
CWE
CWE-79
Yayın Tarihi
2026-02-06 19:16:08
Güncelleme
2026-02-23 20:48:10
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-79 Zulip Server LOW Zulip 2026

Referanslar

https://github.com/zulip/zulip/commit/e6093d9e4788f4d82236d856c5ed7b16767886a7 https://github.com/zulip/zulip/releases/tag/11.5 https://github.com/zulip/zulip/security/advisories/GHSA-56qv-8823-6fq9 https://zulip.readthedocs.io/en/latest/overview/changelog.html#zulip-server-11-5