CVE-2016-4426 In zulip before 1.3.12, bot API keys were accessible to other users in the same realm

Description

In zulip before 1.3.12, bot API keys were accessible to other users in the same realm.

Affected products and versions

Product	Affected versions	Fixed in
zulip	Versions not published

Other CVEs of zulip

The 2 CVEs of zulip →

CVE-2016-4427 In zulip before 1.3.12, deactivated users could access messages if SSO was enabled Not rated