Approved changes feed: RSS · Atom

cpe:2.3:a:zulip:zulip:8.3:*:*:*:*:*:*:*

part: a version: 8.3 update: *

VendorZulip (ebb0f23a-bdd7-5b5e-8416-5fa4568be6a4)
ProductZulip (08772941-c129-5c24-9255-c16d9aa1a4e2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/zulip/zulip purl2cpe 2026-06-01 10:11:52.585465
pkg:sourceforge/zulip.mirror purl2cpe 2026-06-01 10:11:52.585467

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36625 vulnerable 2026-06-08 06:39:45.562906 Details available
Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the replace_emoji_with_text function in ui_util.ts.
Published: 2024-11-29T00:00:00.000Z
Updated: 2024-11-29T17:09:49.937Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36624 vulnerable 2026-06-08 06:39:45.562376 Details available
Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the construct_copy_div function in copy_and_paste.js.
Published: 2024-11-29T00:00:00.000Z
Updated: 2024-11-29T18:17:17.138Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.