CVE-2016-4427

CVE-2016-4427

Vendor N/A

Product zulip

Weakness CWE-284

Published July 28, 2022

Last update August 6, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In zulip before 1.3.12, deactivated users could access messages if SSO was enabled.

Key dates

02Disclosure timeline

July 28, 2022 CVE published

August 6, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2016-4427 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/284.html

Related vulnerabilities

04Related CVE

CVE-2025-2334 274056675 springboot-openai-chatgpt Chat History chat deleteChat access control CVE-2024-32045 Playbook run link to private channel grants channel access CVE-2023-22285 CVE-2024-1294 Sunshine Photo Cart: Free Client Galleries for Photographers <= 3.0.24 - Unauthenticated Sensitive Information Exposure via Invoice CVE-2023-4696 Improper Access Control in usememos/memos