CVE-2016-4427 In zulip before 1.3.12, deactivated users could access messages if SSO was enabled

Description

In zulip before 1.3.12, deactivated users could access messages if SSO was enabled.

Affected products and versions

Product	Affected versions	Fixed in
zulip	Versions not published

Other CVEs of zulip

The 2 CVEs of zulip →

CVE-2016-4426 In zulip before 1.3.12, bot API keys were accessible to other users in the same realm Not rated