Vulnerability Database

309,136

Total vulnerabilities in the database

CVE-2017-0881

An error in the implementation of an autosubscribe feature in the check_stream_exists route of the Zulip group chat application server before 1.4.3 allowed an authenticated user to subscribe to a private stream that should have required an invitation from an existing member to join. The issue affects all previously released versions of the Zulip server.

  • Published: Mar 28, 2017
  • Updated: Nov 9, 2025
  • CVE: CVE-2017-0881
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4
  • AV:N/AC:L/Au:S/C:P/I:N/A:N