CVE-2025-46815

2 advisories.

Go/github.com/zitadel/zitadel CVE-2025-46815: high 8, EPSS 0.46%

ZITADEL Allows IdP Intent Token Reuse

Action: Upgrade github.com/zitadel/zitadel to 2.70.10 or later.

go get github.com/zitadel/zitadel@v3.0.0

go get github.com/zitadel/zitadel@v2.70.10

go get github.com/zitadel/zitadel@v2.71.9

Affected

introduced	fixed	last affected
3.0.0-rc.1	3.0.0	-
0	2.70.10	-
2.71.0	2.71.9	-

Fixed versions

3.0.0

2.70.10

2.71.9

Sources

CVE-2025-46815 · published 2025-05-06T16:51:16Z · modified 2025-05-15T20:41:59.229412Z · JSON

Go/github.com/zitadel/zitadel CVE-2025-46815: unknown, EPSS 0.46%

ZITADEL Allows IdP Intent Token Reuse in github.com/zitadel/zitadel

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

No fixed version in the source.

Sources

CVE-2025-46815 · published 2025-05-15T20:00:12Z · modified 2025-05-15T20:41:59.229412Z · JSON