Rezultati pretraživanja za 'Proizvođač: zitadel'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-32868 | 6.5 | ZITADEL provides users the possibility to use Time-based One-Time-Password (TOTP) and One-Time-Password (OTP) through SMS and Email. While ZITADEL already gives administrators the option to define a `Lockout Policy` with a maximum amount of failed pa | 2025-01-08 18:21:50 | 2024-04-26 00:15:08 |
| CVE-2024-29892 | 6.1 | ZITADEL, open source authentication management software, uses Go templates to render the login UI. Under certain circumstances an action could set reserved claims managed by ZITADEL. For example it would be possible to set the claim `urn:zitadel:iam: | 2025-01-08 18:20:34 | 2024-03-27 20:15:08 |
| CVE-2024-29891 | 8.7 | ZITADEL users can upload their own avatar image and various image types are allowed. Due to a missing check, an attacker could upload HTML and pretend it is an image to gain access to the victim's account in certain scenarios. A possible victim would | 2025-01-08 18:16:59 | 2024-03-27 20:15:07 |
| CVE-2024-28855 | 8.1 | ZITADEL, open source authentication management software, uses Go templates to render the login UI. Due to a improper use of the `text/template` instead of the `html/template` package, the Login UI did not sanitize input parameters prior to versions 2 | 2025-01-08 18:14:28 | 2024-03-18 22:15:08 |
| CVE-2024-28197 | 7.5 | Zitadel is an open source identity management system. Zitadel uses a cookie to identify the user agent (browser) and its user sessions. Although the cookie was handled according to best practices, it was accessible on subdomains of the ZITADEL insta | 2025-01-07 15:54:40 | 2024-03-11 20:15:07 |
| CVE-2024-47060 | 6.5 | Zitadel is an open source identity management platform. In Zitadel, even after an organization is deactivated, associated projects, respectively their applications remain active. Users across other organizations can still log in and access through th | 2024-09-25 16:43:47 | 2024-09-20 00:15:03 |
| CVE-2024-47000 | 7.5 | Zitadel is an open source identity management platform. ZITADEL's user account deactivation mechanism did not work correctly with service accounts. Deactivated service accounts retained the ability to request tokens, which could lead to unauthorized | 2024-09-24 20:25:30 | 2024-09-20 00:15:03 |
| CVE-2024-46999 | 6.5 | Zitadel is an open source identity management platform. ZITADEL's user grants deactivation mechanism did not work correctly. Deactivated user grants were still provided in token, which could lead to unauthorized access to applications and resources. | 2024-09-24 20:20:39 | 2024-09-20 00:15:03 |
| CVE-2023-49097 | 8.8 | ZITADEL is an identity infrastructure system. ZITADEL uses the notification triggering requests Forwarded or X-Forwarded-Host header to build the button link sent in emails for confirming a password reset with the emailed code. If this header is over | 2023-12-08 15:18:19 | 2023-11-30 05:15:09 |
| CVE-2023-22492 | 5.9 | ZITADEL is a combination of Auth0 and Keycloak. RefreshTokens is an OAuth 2.0 feature that allows applications to retrieve new access tokens and refresh the user's session without the need for interacting with a UI. RefreshTokens were not invalidated | 2023-01-24 18:21:00 | 2023-01-11 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/5
Zapisa po stranici: