CVE-2021-30487

LowCVSS 2.7/10Last modified Jun 17, 2026

Description

In the topic moving API in Zulip Server 3.x before 3.4, organization administrators were able to move messages to streams in other organizations hosted by the same Zulip installation.

Metrics

CVSS 3.1 2.7/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Affected software

No affected versions have been published.

Timeline

Published
Apr 15, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-30494.3An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated network-based attacker with iCVE-2021-304907.8upsMonitor in ViewPower (aka ViewPowerHTML) 1.04-21012 through 1.04-21353 has insecure permissions for the service binary that enable an AutCVE-2021-304935.5Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the ChromaBrCVE-2021-304945.5Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the Razer ChCVE-2021-304965.7The Telegram app 7.6.2 for iOS allows remote authenticated users to cause a denial of service (application crash) if the victim pastes an atCVE-2021-304977.5Ivanti Avalanche (Premise) 6.3.2 allows remote unauthenticated users to read arbitrary files via Absolute Path Traversal. The imageFilePath CVE-2021-304987.8A flaw was found in libcaca. A heap buffer overflow in export.c in function export_tga might lead to memory corruption and other potential cCVE-2021-304997.8A flaw was found in libcaca. A buffer overflow of export.c in function export_troff might lead to memory corruption and other potential consCVE-2021-30508.8An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to execute arbitCVE-2021-305007.8Null pointer dereference was found in upx PackLinuxElf::canUnpack() in p_lx_elf.cpp,in version UPX 4.0.0. That allow attackers to execute arCVE-2021-305015.5An assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of servCVE-2021-305029.8The unofficial vscode-ghc-simple (aka Simple Glasgow Haskell Compiler) extension before 0.2.3 for Visual Studio Code allows remote code exec
CVE-2021-30487: Low severity, CVSS 2.7 | Vulnix