CVE-2021-30487
Low
Published: 15 April 2021
Published
15 April 2021
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
2.7
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
EPSS Score
0.0021
44.0th percentile
Risk Priority
6
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2021-30487 is a low-severity an unspecified weakness vulnerability in Zulip Zulip Server. Its CVSS base score is 2.7 (Low).
Operationally, ranked at the 44.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-17409
Vulnerability details
In the topic moving API in Zulip Server 3.x before 3.4, organization administrators were able to move messages to streams in other organizations hosted by the same Zulip installation.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
zulip
zulip server
3.0 — 3.4
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.