Advisories · Technology
zitadel.
Every CVE that names zitadel among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 Account Takeover via Device Authorization Approval
- zitadel
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookie
- zitadel
- CWE-565
- CVSS 8.6 High
ZITADEL 4.0.0 before 4.19.5 Account Takeover via Login V2 Host Header Injection
- zitadel
- CWE-640
- CVSS 5.1 Medium
ZITADEL 3.0.0 before 4.19.2 Privilege Escalation via OIDC Token Exchange Impersonation
- zitadel
- Broken access control
- CVSS 9.2 CriticalCritical · CVSS 9+
ZITADEL 3.0.0 before 4.19.2 Account Takeover via Unsigned Login V2 Session Cookie
- zitadel
- CWE-441
- CVSS 9.3 CriticalCritical · CVSS 9+
ZITADEL 3.0.0 before 4.19.2 Account Takeover via SAML Identity-Provider Confusion
- zitadel
- Authentication bypass
- CVSS 8.8 High
ZITADEL 3.0.0 before 4.18.0 Unauthenticated Username Change via Login V1
- zitadel
- Authentication bypass
- CVSS 9.3 CriticalCritical · CVSS 9+
ZITADEL before 4.16.2 Account Pre-Hijacking via Forged External IdP Callback
- zitadel
- Authentication bypass
- CVSS 2.3 Low
Zitadel before 4.16.2 SSRF via Organization Domain HTTP Verification
- zitadel
- Server-side request forgery (SSRF)
- CVSS 8.8 High
ZITADEL before 4.17.1 Authentication Bypass via Login V2 for Deactivated Organizations
- zitadel
- Authentication bypass
- CVSS 8.7 High
ZITADEL before 3.4.14 and 4.16.2 Account Takeover via Passkey Enrollment
- zitadel
- Authentication bypass
- CVSS 9.2 CriticalCritical · CVSS 9+
ZITADEL before 4.17.1 Authentication Bypass via Login V2 OTP returnCode
- zitadel
- Information disclosure
- CVSS 8.8 High
ZITADEL before 4.17.1 Unauthenticated MFA Enrollment via Login V1 Init Handlers
- zitadel
- Authentication bypass
- CVSS 9.3 CriticalCritical · CVSS 9+
ZITADEL before 3.4.15 and 4.17.1 Cross-Organization Account Takeover via Passkey Enrollment
- zitadel
- Broken access control
- CVSS 8.7 High
ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokens
- zitadel
- CWE-649
- CVSS 9.3 CriticalCritical · CVSS 9+
ZITADEL before 4.17.3 Account Takeover via External IdP Linking
- zitadel
- Authentication bypass
- CVSS 5.3 Medium
ZITADEL before 4.17.3 Cross-Organization Authentication Method Enumeration via User Service
- zitadel
- Broken access control
- CVSS 7.3 High
ZITADEL: Stored XSS via Default URI Redirect in Login V2
- zitadel
- Cross-site scripting (XSS)
- CVSS 7.4 High
ZITADEL: Reactivation of Expired Passkey Registration Codes
- zitadel
- Authentication bypass
- CVSS 7.7 High
ZITADEL Cross-Tenant Information Disclosure in Management API
- zitadel
- Broken access control
- CVSS 7.5 High
ZITADEL SCIM Authentication Bypass via URL Encoding
- zitadel
- Authentication bypass
- CVSS 5.3 Medium
ZITADEL user enumeration vulnerability in login UI
- zitadel
- Information disclosure
- CVSS 7.7 High
ZITADEL has broken authN and authZ in session API and resulting session tokens
- zitadel
- Authentication bypass
- Broken access control
- CVSS 5.3 Medium
Zitadel allows User Enumeration by loginname attribute normalization
- zitadel
- Information disclosure
- CWE-204
- CVSS 8.7 High
Zitadel Expired JWT Keys Usable for Authorization Grants
- zitadel
- CWE-324
- CVSS 8.7 High
XSS with User Avatar image in ZITADEL
- zitadel
- Cross-site scripting (XSS)