CVE-2020-12759

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Aug 21, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-12767.8An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaCVE-2020-127608.8An issue was discovered in OpenNMS Horizon before 26.0.1, and Meridian before 2018.1.19 and 2019 before 2019.1.7. The ActiveMQ channel confiCVE-2020-127619.1modules/loaders/loader_ico.c in imlib2 1.6.0 has an integer overflow (with resultant invalid memory allocations and out-of-bounds reads) viaCVE-2020-127627.8json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.CVE-2020-127639.8TRENDnet ProView Wireless camera TV-IP512WN 1.0R 1.0.4 is vulnerable to an unauthenticated stack-based buffer overflow in handling RTSP packCVE-2020-127645.3Gnuteca 3.8 allows file.php?folder=/&file= Directory Traversal.CVE-2020-127655.3Solis Miolo 2.0 allows index.php?module=install&action=view&item= Directory Traversal.CVE-2020-127669.8Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter.CVE-2020-127675.5exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.CVE-2020-127685.5An issue was discovered in the Linux kernel before 5.6. svm_cpu_uninit in arch/x86/kvm/svm.c has a memory leak, aka CID-d80b64ff297e. NOTE: CVE-2020-127695.5An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dwCVE-2020-12777.8An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatio
CVE-2020-12759: Medium severity, CVSS 6.1 | Vulnix