tocsin

CVE-2024-49753

2 advisories.

Go/github.com/zitadel/zitadel CVE-2024-49753: medium 5.9

Denied Host Validation Bypass in Zitadel Actions

Action: Upgrade github.com/zitadel/zitadel to 0.0.0-20241022141644-79fb4cc1cc6e or later.

go get github.com/zitadel/zitadel@v2.64.1
go get github.com/zitadel/zitadel@v2.63.6
go get github.com/zitadel/zitadel@v2.62.8
go get github.com/zitadel/zitadel@v2.61.4
go get github.com/zitadel/zitadel@v2.60.4
go get github.com/zitadel/zitadel@v2.59.5
go get github.com/zitadel/zitadel@v2.58.7
go get github.com/zitadel/zitadel@v0.0.0-20241022141644-79fb4cc1cc6e
go get github.com/zitadel/zitadel@v1.80.0-v2.20.0.20241022141644-79fb4cc1cc6e

Affected

introducedfixedlast affected
2.64.02.64.1-
2.63.02.63.6-
2.62.02.62.8-
2.61.02.61.4-
2.60.02.60.4-
2.59.02.59.5-
1.80.12.58.7-
0--
0.0.01.80.0-v2.20.0.20241022141644-79fb4cc1cc6e-

Fixed versions

2.64.12.63.62.62.82.61.42.60.42.59.52.58.70.0.0-20241022141644-79fb4cc1cc6e1.80.0-v2.20.0.20241022141644-79fb4cc1cc6e

Sources

CVE-2024-49753 · published · modified · JSON

Go/github.com/zitadel/zitadel CVE-2024-49753: critical 9.1

Denied Host Validation Bypass in Zitadel Actions in github.com/zitadel/zitadel

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2024-49753 · published · modified · JSON