GO-2025-3499

See a problem?
Please try reporting it to the source first.

Source

https://pkg.go.dev/vuln/GO-2025-3499

Import Source

https://vuln.go.dev/ID/GO-2025-3499.json

JSON Data

https://api.osv.dev/v1/vulns/GO-2025-3499

Aliases

Published

2025-03-10T20:41:22Z

Modified

2025-03-10T21:27:05.040791Z

Summary

IDOR Vulnerabilities in ZITADEL's Admin API that Primarily Impact LDAP Configurations in github.com/zitadel/zitadel

Details

IDOR Vulnerabilities in ZITADEL's Admin API that Primarily Impact LDAP Configurations in github.com/zitadel/zitadel.

NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.

(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)

The additional affected modules and versions are: github.com/zitadel/zitadel before v2.63.8, from v2.64.0 before v2.64.5, from v2.65.0 before v2.65.6, from v2.66.0 before v2.66.11, from v2.67.0 before v2.67.8, from v2.68.0 before v2.68.4, from v2.69.0 before v2.69.4, from v2.70.0 before v2.70.1.

Database specific

{
    "review_status": "UNREVIEWED",
    "url": "https://pkg.go.dev/vuln/GO-2025-3499"
}

References

Affected packages

Go / github.com/zitadel/zitadel

Package

Name: github.com/zitadel/zitadel; View open source insights on deps.dev
Purl: pkg:golang/github.com/zitadel/zitadel

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Ecosystem specific

{
    "custom_ranges": [
        {
            "events": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "2.63.8"
                },
                {
                    "introduced": "2.64.0"
                },
                {
                    "fixed": "2.64.5"
                },
                {
                    "introduced": "2.65.0"
                },
                {
                    "fixed": "2.65.6"
                },
                {
                    "introduced": "2.66.0"
                },
                {
                    "fixed": "2.66.11"
                },
                {
                    "introduced": "2.67.0"
                },
                {
                    "fixed": "2.67.8"
                },
                {
                    "introduced": "2.68.0"
                },
                {
                    "fixed": "2.68.4"
                },
                {
                    "introduced": "2.69.0"
                },
                {
                    "fixed": "2.69.4"
                },
                {
                    "introduced": "2.70.0"
                },
                {
                    "fixed": "2.70.1"
                }
            ],
            "type": "ECOSYSTEM"
        }
    ]
}