Rezultati pretraživanja za 'Proizvođač: zitadel'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-27507 | 9.0 | The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. ZITADEL's Admin API contains Insecure Direct Object Reference (IDOR) vulnerabilities that allow authenticated users, without specifi | 2025-08-26 17:15:22 | 2025-03-04 17:15:20 |
| CVE-2025-31123 | 8.7 | Zitadel is open-source identity infrastructure software. A vulnerability existed where expired keys can be used to retrieve tokens. Specifically, ZITADEL fails to properly check the expiration date of the JWT key when used for Authorization Grants. T | 2025-08-26 17:13:31 | 2025-03-31 20:15:15 |
| CVE-2024-49757 | 7.5 | The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Due to a missing security check in versions prior to 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7, disabling the "User | 2025-08-26 16:31:17 | 2024-10-25 15:15:18 |
| CVE-2024-49753 | 5.9 | Zitadel is open-source identity infrastructure software. Versions prior to 2.64.1, 2.63.6, 2.62.8, 2.61.4, 2.60.4, 2.59.5, and 2.58.7 have a flaw in the URL validation mechanism of Zitadel actions allows bypassing restrictions intended to block reque | 2025-08-26 16:28:04 | 2024-10-25 14:15:12 |
| CVE-2025-46815 | 8.0 | The identity infrastructure software ZITADEL offers developers the ability to manage user sessions using the Session API. This API enables the use of IdPs for authentication, known as idp intents. Following a successful idp intent, the client receive | 2025-08-26 16:02:35 | 2025-05-06 18:15:38 |
| CVE-2025-48936 | 8.1 | Zitadel is open-source identity infrastructure software. Prior to versions 2.70.12, 2.71.10, and 3.2.2, a potential vulnerability exists in the password reset mechanism. ZITADEL utilizes the Forwarded or X-Forwarded-Host header from incoming requests | 2025-06-04 18:31:41 | 2025-05-30 07:15:24 |
| CVE-2024-32967 | 5.3 | Zitadel is an open source identity management system. In case ZITADEL could not connect to the database, connection information including db name, username and db host name could be returned to the user. This has been addressed in all supported relea | 2025-01-08 18:30:33 | 2024-05-01 07:15:40 |
| CVE-2024-41953 | 4.3 | Zitadel is an open source identity management system. ZITADEL uses HTML for emails and renders certain information such as usernames dynamically. That information can be entered by users or administrators. Due to a missing output sanitization, these | 2025-01-08 18:29:25 | 2024-07-31 17:15:10 |
| CVE-2024-41952 | 5.3 | Zitadel is an open source identity management system. ZITADEL administrators can enable a setting called "Ignoring unknown usernames" which helps mitigate attacks that try to guess/enumerate usernames. If enabled, ZITADEL will show the password promp | 2025-01-08 18:27:21 | 2024-07-31 17:15:10 |
| CVE-2024-39683 | 5.7 | ZITADEL is an open-source identity infrastructure tool. ZITADEL provides users the ability to list all user sessions of the current user agent (browser). Starting in version 2.53.0 and prior to versions 2.53.8, 2.54.5, and 2.55.1, due to a missing ch | 2025-01-08 18:24:07 | 2024-07-03 20:15:04 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/5
Zapisa po stranici: