Advisories · Technology
logto.
Every CVE that names logto among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.5 High
Logto: SSRF via Webhooks and Custom OAuth2 Connector UserInfo Endpoint
- logto
- Server-side request forgery (SSRF)
- CVSS 7.6 High
Logto: Account API can disclose stored third-party provider tokens without the identities scope
- logto
- Broken access control
- CVSS 8.2 High
Logto Server-Side Request Forgery via OIDC SSO Connector Issuer URL
- logto
- Server-side request forgery (SSRF)
- CVSS 8.2 High
Logto Server-Side Request Forgery via webhook test endpoint
- logto
- Server-side request forgery (SSRF)
- CVSS 6.3 Medium
Logto: OS command injection vulnerability exists in the Commitlint workflow
- logto
- Code injection
- CVSS 7.5 High
Logto: ReDoS via unescaped user input in email subaddressing regex (blockSubaddressing)
- logto
- Denial of service
- CVSS 9.1 CriticalCritical · CVSS 9+
Unverified email-based SSO account linking
- Logto
- Authentication bypass
- CVSS 9.1 CriticalCritical · CVSS 9+
LOIDC nonce validation bypass
- Logto
- CWE-345
- CVSS 7.5 High
IdP-initiated SAML sessions not reliably invalidated (replay)
- Logto
- Authentication bypass
- CVSS 7.5 High
SAML <Conditions> element not validated
- Logto
- CWE-345
- CVSS 9.1 CriticalCritical · CVSS 9+
Local MFA not enforced during SSO sign-in
- Logto
- CWE-308
- CVSS 9.1 CriticalCritical · CVSS 9+
Principal/domain lookup without case normalization
- Logto
- CWE-178
- CVSS 8.1 High
Logto: Account Center MFA management step-up bypass via WebAuthn registration verification
- logto
- Authentication bypass
- CVSS 6.4 Medium
Logto: TOTP code can be replayed within the RFC 6238 validity window (one-time use violation)
- logto
- Authentication bypass
- CVSS 8.5 High
Logto: SAML IdP injects user-controlled profile attributes raw into signed assertions, allowing privilege escalation at relying Service Providers
- logto
- Other injection
- CWE-1395
- CVSS 6.1 Medium
Logto: XSS via unescaped RelayState in SAML auto-submit form
- logto
- Cross-site scripting (XSS)