Cloudanix VulnDB

GO-2025-4210

None

CVSS

—

EPSS

—

Published

Dec 15, 2025

CISA due date

—

The record

ZITADEL Vulnerable to Unauthenticated Full-Read SSRF via V2 Login in github.com/zitadel/zitadel

Affected packages

Ecosystem Package Introduced Fixed
Go github.com/zitadel/zitadel 0 1.80.0-v2.20.0.20251208091519-4c879b47334e
Go github.com/zitadel/zitadel 1.83.4 No fix
Go github.com/zitadel/zitadel 4.0.0-rc.1 4.7.1
Go github.com/zitadel/zitadel/v2 0 1.80.0-v2.20.0.20251208091519-4c879b47334e
go github.com/zitadel/zitadel 1.83.4 No fix
go github.com/zitadel/zitadel 4.0.0-rc.1 4.7.1

Related vulnerabilities