CVE:CVE-2020-12759
CNNVD:CNNVD-202008-1102
Zulip Server before 2.1.5 存在跨站脚本，该漏洞源于允许通过Dropbox webhook反射XSS。
solution:Upgrade zulip zulip_server to a higher version than 2.1.5,and avoid the version (,2.1.5)