Rezultati pretraživanja za 'Proizvođač: zitadel'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-44671 | 7.5 | ZITADEL is an open source identity management platform. From 2.71.11 to before 3.4.10 and 4.15.0, a vulnerability was discovered in Zitadel's LDAP identity provider implementation, which fails to properly escape user-provided usernames before incorpo | 2026-05-15 17:15:03 | 2026-05-14 22:16:44 |
| CVE-2026-33132 | 5.3 | ZITADEL is an open source identity management platform. Versions prior to 3.4.9 and 4.0.0 through 4.12.2 allowed users to bypass organization enforcement during authentication. Zitadel allows applications to enforce an organzation context during auth | 2026-03-23 18:06:26 | 2026-03-20 11:18:02 |
| CVE-2026-32132 | 7.4 | ZITADEL is an open source identity management platform. Prior to 3.4.8 and 4.12.2, a potential vulnerability exists in Zitadel's passkey registration endpoints. This endpoint allows registering a new passkey using a previously retrieved code. An impr | 2026-03-16 16:52:31 | 2026-03-11 22:16:33 |
| CVE-2026-32131 | 7.7 | ZITADEL is an open source identity management platform. Prior to 3.4.8 and 4.12.2, a vulnerability in Zitadel's Management API has been reported, which allowed authenticated users holding a valid low-privilege token (e.g., project.read, project.grant | 2026-03-16 16:52:22 | 2026-03-11 22:16:32 |
| CVE-2026-32130 | 7.5 | ZITADEL is an open source identity management platform. From 2.68.0 to before 3.4.8 and 4.12.2, Zitadel provides a System for Cross-domain Identity Management (SCIM) API to provision users from external providers into Zitadel. Request to the API with | 2026-03-16 16:51:59 | 2026-03-11 22:16:32 |
| CVE-2026-29067 | 8.1 | ZITADEL is an open source identity management platform. From version 4.0.0-rc.1 to 4.7.0, a potential vulnerability exists in ZITADEL's password reset mechanism in login V2. ZITADEL utilizes the Forwarded or X-Forwarded-Host header from incoming requ | 2026-03-10 17:58:23 | 2026-03-07 15:15:54 |
| CVE-2026-29191 | 9.3 | ZITADEL is an open source identity management platform. From version 4.0.0 to 4.11.1, a vulnerability in Zitadel's login V2 interface was discovered that allowed a possible account takeover via XSS in /saml-post Endpoint. This issue has been patched | 2026-03-10 17:55:39 | 2026-03-07 15:15:55 |
| CVE-2026-29192 | 7.7 | ZITADEL is an open source identity management platform. From version 4.0.0 to 4.11.1, a vulnerability in Zitadel's login V2 interface was discovered that allowed a possible account takeover via Default URI Redirect. This issue has been patched in ver | 2026-03-10 17:54:28 | 2026-03-07 15:15:55 |
| CVE-2026-29193 | 8.2 | ZITADEL is an open source identity management platform. From version 4.0.0 to 4.12.0, a vulnerability in Zitadel's login V2 UI allowed users to bypass login behavior and security policies and self-register new accounts or sign in using password even | 2026-03-10 17:52:35 | 2026-03-07 15:15:55 |
| CVE-2026-27840 | 4.3 | ZITADEL is an open source identity management platform. Starting in version 2.31.0 and prior to versions 3.4.7 and 4.11.0, opaque OIDC access tokens in the v2 format truncated to 80 characters are still considered valid. Zitadel uses a symmetric AES | 2026-03-05 16:04:57 | 2026-02-26 01:16:25 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/5
Zapisa po stranici: