zitadel Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by zitadel

JSON RSS CSV 🔔 Create Alert Trigger

6 May 2025

Session API Vulnerability in ZITADEL Identity Infrastructure Software
CVE-2025-46815
ZitadelZitadel8HIGH

31 March 2025

Identity Infrastructure Vulnerability in Zitadel Affecting Token Authorization
CVE-2025-31123
ZitadelZitadel8.7HIGH

4 March 2025

Insecure Direct Object Reference Vulnerability in Zitadel Identity Infrastructure Software
CVE-2025-27507
ZitadelZitadel9CRITICAL

25 October 2024

Zitadel Disables User Self-Registration Due to Security Vulnerability
CVE-2024-49757
ZitadelZitadel7.5HIGH

20 September 2024

Service Account Deactivation Issue in Zitadel Identify Management Platform
CVE-2024-47000
ZitadelZitadel7.5HIGH

26 April 2024

ZITADEL Patches (T)OTP Check Lockout Mechanism in Version 2.50.0
CVE-2024-32868
ZitadelZitadel8.1HIGH

27 March 2024

User-Uploaded Avatar Image Vulnerability in ZITADEL by ZITADEL
CVE-2024-29891
ZitadelZitadel8.7HIGH

11 March 2024

Zitadel Fixes Cookie Vulnerability Affecting User Sessions
CVE-2024-28197
ZitadelZitadel7.5HIGH

30 November 2023

ZITADEL vulnerable account takeover via malicious host header injection
CVE-2023-49097
ZitadelZitadel8.1HIGH

8 November 2023

ZITADEL race condition in lockout policy execution
CVE-2023-47111
ZitadelZitadel7.3HIGH

31 August 2022

Broken Authorization in ZITADEL Actions
CVE-2022-36051
ZitadelZitadel8.7HIGH

No more vulnerabilities to load.