CVE-2023-28623

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-28623
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-28623.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-28623
Aliases
  • GHSA-7p62-pjwg-56rv
Published
2023-05-19T21:04:51.624Z
Modified
2026-07-15T01:49:10.833339318Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N CVSS Calculator
Summary
Unauthorized user can register an account in specific configurations in Zulip
Details

Zulip is an open-source team collaboration tool with unique topic-based threading. In the event that 1: ZulipLDAPAuthBackend and an external authentication backend (any aside of ZulipLDAPAuthBackend and EmailAuthBackend) are the only ones enabled in AUTHENTICATION_BACKENDS in /etc/zulip/settings.py and 2: The organization permissions don't require invitations to join. An attacker can create a new account in the organization with an arbitrary email address in their control that's not in the organization's LDAP directory. The impact is limited to installations which have this specific combination of authentication backends as described above in addition to having Invitations are required for joining this organization organization permission disabled. This issue has been addressed in version 6.2. Users are advised to upgrade. Users unable to upgrade may enable the Invitations are required for joining this organization organization permission to prevent this issue.

Database specific 
{
    "cwe_ids": [
        "CWE-285",
        "CWE-862"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/28xxx/CVE-2023-28623.json",
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/zulip/zulip

Affected ranges

Type
GIT
Repo
https://github.com/zulip/zulip
Events
Introduced
03a3ae8b61bd44bb1be06c9af04eeb607fa94d8f
Fixed
5082182e37a453ce66af41796db43458f6455875
Database specific 
{
    "extracted_events": [
        {
            "introduced": "2.1.0"
        },
        {
            "fixed": "6.2"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

2.*
2.1.0
2.2-dev
3.*
3.0
3.0-dev
3.0-rc1
3.0-rc2
4.*
4.0
4.0-dev
5.*
5.0
5.0-dev
6.*
6.0
6.0-dev
6.1
shared-0.*
shared-0.0.10
shared-0.0.11
shared-0.0.12
shared-0.0.13
shared-0.0.14
shared-0.0.15
shared-0.0.16
shared-0.0.3
shared-0.0.4
shared-0.0.5
shared-0.0.6
shared-0.0.7
shared-0.0.8
shared-0.0.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-28623.json"