CVE-2023-47111
1 advisory.
Go/github.com/zitadel/zitadel CVE-2023-47111: high 7.3
ZITADEL race condition in lockout policy execution
Action: Upgrade github.com/zitadel/zitadel to 2.38.3 or later.
go get github.com/zitadel/zitadel@v2.40.5go get github.com/zitadel/zitadel@v2.38.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.39.0 | 2.40.5 | - |
| 0 | 2.38.3 | - |
Fixed versions
| 2.40.5 | 2.38.3 |
Sources
- osv: GHSA-7h8m-vrxx-vr4m
- https://github.com/zitadel/zitadel/security/advisories/GHSA-7h8m-vrxx-vr4m
- https://nvd.nist.gov/vuln/detail/CVE-2023-47111
- https://github.com/zitadel/zitadel/commit/22e2d5599918864877e054ebe82fb834a5aa1077
- https://github.com/zitadel/zitadel
- https://github.com/zitadel/zitadel/releases/tag/v2.38.3
- https://github.com/zitadel/zitadel/releases/tag/v2.40.5
CVE-2023-47111 · published · modified · JSON