CVE-2021-3866

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2021-3866

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3866.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2021-3866

Published

2022-01-20T11:15:07Z

Modified

2026-10-20T10:54:52Z

Severity

5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

Cross-site Scripting (XSS) - Stored in GitHub repository zulip/zulip more than and including 44f935695d452cc3fb16845a0c6af710438b153d and prior to 3eb2791c3e9695f7d37ffe84e0c2184fae665cb6.

Database specific

{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:a:zulip:zulip:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "last_affected":  "4.8"
                        }
                    ],
                    "source":  "CPE_RANGE"
                }
            ],
            "vendor_product":  "zulip:zulip"
        }
    ]
}

References

Affected packages

Git / github.com/zulip/zulip

Affected ranges

Type

GIT

Repo

https://github.com/zulip/zulip

Events

Introduced

Last Affected

ae000bfdbaf428cb1f7164bab0668111e14d2304

Fixed

3eb2791c3e9695f7d37ffe84e0c2184fae665cb6

Database specific

Show details

{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:zulip:zulip:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "4.8"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "range":  [
                {
                    "fixed":  "3eb2791c3e9695f7d37ffe84e0c2184fae665cb6"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

1.*

1.3.0

1.3.1

1.3.10

1.3.11

1.3.13

1.3.2

1.3.3

1.3.4

1.3.5

1.3.6

1.3.7

1.3.8

1.3.9

1.4.0

1.5.0

1.6.0

1.7.0

1.8.0

1.8.0-rc1

1.9.0

1.9.0-rc2

1.9.0-rc3

2.*

2.0.0

2.0.0-rc1

2.1-dev

2.1.0

2.1.0-rc1

2.2-dev

3.*

3.0

3.0-dev

3.0-rc1

3.0-rc2

4.*

4.0

4.0-dev

4.1

4.2

4.3

4.4

4.5

4.6

4.7

4.8

5.*

5.0-dev

enterprise-1.*

enterprise-1.1.5

enterprise-1.2.0

shared-0.*

shared-0.0.1

shared-0.0.2

shared-0.0.3

shared-0.0.4

shared-0.0.5

shared-0.0.6

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3866.json"