CVE-2020-14194

Zulip Server before 2.1.5 allows reverse tabnapping via a topic header link.