CVE-2024-28197

2 advisories.

Go/github.com/zitadel/zitadel CVE-2024-28197: high 7.5, EPSS 0.34%

Account Takeover via Session Fixation in Zitadel [Bypassing MFA]

Action: Upgrade github.com/zitadel/zitadel to 2.44.3 or later.

go get github.com/zitadel/zitadel@v2.44.3

go get github.com/zitadel/zitadel@v2.45.1

Affected

introduced	fixed	last affected
0	2.44.3	-
2.45.0	2.45.1	-

Fixed versions

2.44.3

2.45.1

Sources

CVE-2024-28197 · published 2024-03-11T21:25:52Z · modified 2026-09-10T03:50:10.644900051Z · JSON

Go/github.com/zitadel/zitadel CVE-2024-28197: unknown, EPSS 0.34%

Account Takeover via Session Fixation in Zitadel [Bypassing MFA] in github.com/zitadel/zitadel

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

No fixed version in the source.

Sources

CVE-2024-28197 · published 2024-06-05T15:10:52Z · modified 2024-07-09T19:33:56Z · JSON