Vulnerability index

Browse CVEs

42 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Zitadel MEDIUM 5.3
CVE-2024-41952

Zitadel is an open source identity management system. ZITADEL administrators can enable a setting called "Ignoring unknown usernames" which helps mit…

Fix: 2.53.9 / 2.54.8+
Fix from $1,600 2024-07-31
Zitadel MEDIUM 6.5
CVE-2024-39683

ZITADEL is an open-source identity infrastructure tool. ZITADEL provides users the ability to list all user sessions of the current user agent (brows…

Fix: 2.53.8 / 2.54.5+
Fix from $1,600 2024-07-03
Zitadel MEDIUM 5.3
CVE-2024-32967

Zitadel is an open source identity management system. In case ZITADEL could not connect to the database, connection information including db name, us…

Fix: 2.45.7 / 2.46.7+
Fix from $1,600 2024-05-01
Zitadel HIGH 8.1
CVE-2024-32868

ZITADEL provides users the possibility to use Time-based One-Time-Password (TOTP) and One-Time-Password (OTP) through SMS and Email. While ZITADEL al…

Fix: 2.50.0+
Fix from $1,950 2024-04-26
Zitadel HIGH 8.7
CVE-2024-29891

ZITADEL users can upload their own avatar image and various image types are allowed. Due to a missing check, an attacker could upload HTML and preten…

Fix: 2.42.17 / 2.43.11+
Fix from $1,950 2024-03-27
Zitadel MEDIUM 6.1
CVE-2024-28855

ZITADEL, open source authentication management software, uses Go templates to render the login UI. Due to a improper use of the `text/template` inste…

Fix: 2.41.15 / 2.42.15+
Fix from $1,600 2024-03-18
Zitadel HIGH 7.5
CVE-2024-28197

Zitadel is an open source identity management system. Zitadel uses a cookie to identify the user agent (browser) and its user sessions. Although the…

Fix: 2.44.3+
Fix from $1,950 2024-03-11
Zitadel HIGH 8.8
CVE-2023-49097

ZITADEL is an identity infrastructure system. ZITADEL uses the notification triggering requests Forwarded or X-Forwarded-Host header to build the but…

Fix: 2.39.9 / 2.40.10+
Fix from $1,950 2023-11-30
Zitadel MEDIUM 5.4
CVE-2023-46238

ZITADEL is an identity infrastructure management system. ZITADEL users can upload their own avatar image using various image types including SVG. SVG…

Fix: 2.38.2 / 2.39.2+
Fix from $1,600 2023-10-26
Zitadel MEDIUM 5.3
CVE-2023-44399

ZITADEL provides identity infrastructure. In versions 2.37.2 and prior, ZITADEL administrators can enable a setting called "Ignoring unknown username…

Fix: after 2.37.2
Fix from $1,600 2023-10-10
Zitadel MEDIUM 5.9
CVE-2023-22492

ZITADEL is a combination of Auth0 and Keycloak. RefreshTokens is an OAuth 2.0 feature that allows applications to retrieve new access tokens and refr…

Fix: 2.16.4 / 2.17.3+
Fix from $1,600 2023-01-11
Zitadel HIGH 8.8
CVE-2022-36051

ZITADEL combines the ease of Auth0 and the versatility of Keycloak.**Actions**, introduced in ZITADEL **1.42.0** on the API and **1.56.0** for Consol…

Fix: 1.87.1 / 2.2.0+
Fix from $1,950 2022-08-31