tocsin

Go/github.com/zitadel/zitadel CVE-2024-41953: medium 4.3, EPSS 0.65%

ZITADEL has improper HTML sanitization in emails and Console UI

Action: Upgrade github.com/zitadel/zitadel to 0.0.0-20240731122110-189505c80fa6 or later.

go get github.com/zitadel/zitadel@v2.52.3
go get github.com/zitadel/zitadel@v2.53.9
go get github.com/zitadel/zitadel@v2.54.8
go get github.com/zitadel/zitadel@v2.55.5
go get github.com/zitadel/zitadel@v2.56.2
go get github.com/zitadel/zitadel@v2.57.1
go get github.com/zitadel/zitadel@v2.58.1
go get github.com/zitadel/zitadel@v0.0.0-20240731122110-189505c80fa6
go get github.com/zitadel/zitadel@v1.80.0-v2.20.0.20240731122110-189505c80fa6

Affected

introducedfixedlast affected
1.80.12.52.3-
2.53.02.53.9-
2.54.02.54.8-
2.55.02.55.5-
2.56.02.56.2-
2.57.02.57.1-
2.58.02.58.1-
0--
0.0.01.80.0-v2.20.0.20240731122110-189505c80fa6-

Fixed versions

2.52.32.53.92.54.82.55.52.56.22.57.12.58.10.0.0-20240731122110-189505c80fa61.80.0-v2.20.0.20240731122110-189505c80fa6

Sources

CVE-2024-41953 · published · modified · JSON