CVE-2020-12637

9.8 criticalEPSS 0.7%

Critical (9.8) in zulipchat zulip desktop. EPSS 0.7% chance of exploitation in the next 30 days.

Zulip Desktop before 5.2.0 has Missing SSL Certificate Validation because all validation was inadvertently disabled during an attempt to recognize the ignoreCerts option.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2020-05-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zulipchat:zulip_desktop

References

https://blog.zulip.org/2020/05/06/zulip-desktop-5-2-0-security-release/
https://blog.zulip.org/2020/05/06/zulip-desktop-5-2-0-security-release/

Check your stack JSON