Unrated
Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a number of w...
CVE-2020-9443
First seen on SecPulse
Original description The description as published by the source.
References
- advisory blog.zulip.org