tocsin

CVE-2024-29892

2 advisories.

Go/github.com/zitadel/zitadel CVE-2024-29892: medium 6.1

ZITADEL's actions can overload reserved claims

Action: Upgrade github.com/zitadel/zitadel to 2.42.17 or later.

go get github.com/zitadel/zitadel@v2.42.17
go get github.com/zitadel/zitadel@v2.43.11
go get github.com/zitadel/zitadel@v2.44.7
go get github.com/zitadel/zitadel@v2.45.5
go get github.com/zitadel/zitadel@v2.46.5
go get github.com/zitadel/zitadel@v2.47.8
go get github.com/zitadel/zitadel@v2.48.3

Affected

introducedfixedlast affected
02.42.17-
2.43.02.43.11-
2.44.02.44.7-
2.45.02.45.5-
2.46.02.46.5-
2.47.02.47.8-
2.48.02.48.3-

Fixed versions

2.42.172.43.112.44.72.45.52.46.52.47.82.48.3

Sources

CVE-2024-29892 · published · modified · JSON

Go/github.com/zitadel/zitadel CVE-2024-29892: unknown

ZITADEL's actions can overload reserved claims in github.com/zitadel/zitadel

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2024-29892 · published · modified · JSON