CVE-2026-29192
ZITADEL: Stored XSS via Default URI Redirect Leads to Account Takeover
Résumé
ZITADEL: Stored XSS via Default URI Redirect Leads to Account Takeover
Description d'origine
La description telle que publiée par la source (souvent en anglais).
ZITADEL is an open source identity management platform. From version 4.0.0 to 4.11.1, a vulnerability in Zitadel's login V2 interface was discovered that allowed a possible account takeover via Default URI Redirect. This issue has been patched in version 4.12.0.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov