tocsin

CVE-2023-49097

1 advisory.

Go/github.com/zitadel/zitadel CVE-2023-49097: high 8.1

ZITADEL Account Takeover via Malicious Host Header Injection

Action: Upgrade github.com/zitadel/zitadel to 2.39.9 or later.

go get github.com/zitadel/zitadel@v2.39.9
go get github.com/zitadel/zitadel@v2.40.10
go get github.com/zitadel/zitadel@v2.41.6

Affected

introducedfixedlast affected
2.39.02.39.9-
2.40.02.40.10-
2.41.02.41.6-

Fixed versions

2.39.92.40.102.41.6

Sources

CVE-2023-49097 · published · modified · JSON