tocsin

CVE-2024-28855

2 advisories.

Go/github.com/zitadel/zitadel CVE-2024-28855: high 8.1, EPSS 0.78%

Improper HTML sanitization in ZITADEL

Action: Upgrade github.com/zitadel/zitadel to 0.0.0-20240311065202-07ec2efa9dc6 or later.

go get github.com/zitadel/zitadel@v2.41.15
go get github.com/zitadel/zitadel@v2.42.15
go get github.com/zitadel/zitadel@v2.43.9
go get github.com/zitadel/zitadel@v2.44.3
go get github.com/zitadel/zitadel@v2.45.1
go get github.com/zitadel/zitadel@v2.46.1
go get github.com/zitadel/zitadel@v2.47.4
go get github.com/zitadel/zitadel@v0.0.0-20240311065202-07ec2efa9dc6
go get github.com/zitadel/zitadel@v1.80.0-v2.20.0.20240311065202-07ec2efa9dc6

Affected

introducedfixedlast affected
1.80.12.41.15-
2.42.02.42.15-
2.43.02.43.9-
2.44.02.44.3-
2.45.02.45.1-
2.46.02.46.1-
2.47.02.47.4-
0--
0.0.01.80.0-v2.20.0.20240311065202-07ec2efa9dc6-

Fixed versions

2.41.152.42.152.43.92.44.32.45.12.46.12.47.40.0.0-20240311065202-07ec2efa9dc61.80.0-v2.20.0.20240311065202-07ec2efa9dc6

Sources

CVE-2024-28855 · published · modified · JSON

Go/github.com/zitadel/zitadel CVE-2024-28855: unknown, EPSS 0.78%

XSS in github.com/zitadel/zitadel

Action: Upgrade github.com/zitadel/zitadel to 1.80.0-v2.20.0.20240312162750-5908b97e7c22 or later.

go get github.com/zitadel/zitadel@v1.80.0-v2.20.0.20240312162750-5908b97e7c22

Affected

introducedfixedlast affected
01.80.0-v2.20.0.20240312162750-5908b97e7c22-

Fixed versions

1.80.0-v2.20.0.20240312162750-5908b97e7c22

Sources

CVE-2024-28855 · published · modified · JSON