CVE-2016-4427 In zulip before 1.3.12, deactivated users could access messages if SSO was enabled

Description

In zulip before 1.3.12, deactivated users could access messages if SSO was enabled.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
zulip	Versions non publiées

Autres CVE de zulip

Les 2 CVE de zulip →

CVE-2016-4426 In zulip before 1.3.12, bot API keys were accessible to other users in the same realm Non notée