2020-04-20 19:47:17
mitre
PUBLISHED
Zulip Server before 2.1.3 allows XSS via a Markdown link, with resultant account takeover.