CVE-2023-22492
1 advisory.
Go/github.com/zitadel/zitadel CVE-2023-22492: medium 5.9
Zitadel RefreshToken invalidation vulnerability
Action: Upgrade github.com/zitadel/zitadel to 2.16.4 or later.
go get github.com/zitadel/zitadel@v2.17.3go get github.com/zitadel/zitadel@v2.16.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.17.0 | 2.17.3 | - |
| 2.0.0 | 2.16.4 | - |
Fixed versions
| 2.17.3 | 2.16.4 |
Sources
- osv: GHSA-6rrr-78xp-5jp8
- https://github.com/zitadel/zitadel/security/advisories/GHSA-6rrr-78xp-5jp8
- https://nvd.nist.gov/vuln/detail/CVE-2023-22492
- https://github.com/zitadel/zitadel/commit/301e22c4956ead6014a8179463c37263f7301a83
- https://github.com/zitadel/zitadel/commit/fc892c52a10cd4ffdac395747494f3a93a7494c2
- https://github.com/zitadel/zitadel
- https://github.com/zitadel/zitadel/releases/tag/v2.16.4
- https://github.com/zitadel/zitadel/releases/tag/v2.17.3
CVE-2023-22492 · published · modified · JSON