tocsin

CVE-2024-41952

2 advisories.

Go/github.com/zitadel/zitadel CVE-2024-41952: medium 5.3

ZITADEL "ignoring unknown usernames" vulnerability

Action: Upgrade github.com/zitadel/zitadel to 0.0.0-20240731122357-a1d24353db4d or later.

go get github.com/zitadel/zitadel@v2.53.9
go get github.com/zitadel/zitadel@v2.54.8
go get github.com/zitadel/zitadel@v2.55.5
go get github.com/zitadel/zitadel@v2.56.2
go get github.com/zitadel/zitadel@v2.57.1
go get github.com/zitadel/zitadel@v2.58.1
go get github.com/zitadel/zitadel@v0.0.0-20240731122357-a1d24353db4d
go get github.com/zitadel/zitadel@v1.80.0-v2.20.0.20240731122357-a1d24353db4d

Affected

introducedfixedlast affected
2.53.02.53.9-
2.54.02.54.8-
2.55.02.55.5-
2.56.02.56.2-
2.57.02.57.1-
2.58.02.58.1-
0.0.0-20230609131415-dafa8ab4dfe80.0.0-20240731122357-a1d24353db4d-
1.80.0-v2.20.0.20230609131415-dafa8ab4dfe81.80.0-v2.20.0.20240731122357-a1d24353db4d-

Fixed versions

2.53.92.54.82.55.52.56.22.57.12.58.10.0.0-20240731122357-a1d24353db4d1.80.0-v2.20.0.20240731122357-a1d24353db4d

Sources

CVE-2024-41952 · published · modified · JSON

Go/github.com/zitadel/zitadel CVE-2024-41952: unknown

ZITADEL "ignoring unknown usernames" vulnerability in github.com/zitadel/zitadel

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2024-41952 · published · modified · JSON