CVE-2024-28197

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Mar 11, 2024
Updated: Mar 12, 2024
CWE ID 269

Summary

CVE-2024-28197 is a vulnerability in Zitadel, an open source identity management system. The vulnerability allows an attacker to gain access to a user's account by providing a malicious link hosted on a subdomain of the ZITADEL instance. This exploit can only work if the victim logs in through the malicious link and if there is an initial vulnerability on the subdomain, such as control over DNS or a XSS vulnerability. Versions 2.46.0, 2.45.1, and 2.44.3 have been patched, and it is recommended to upgrade to the latest versions available. The base severity of this vulnerability is rated as HIGH with a CVSS score of 7.5, indicating a significant potential danger to organizations using Zitadel if not remediated promptly.

Note: The information provided in this response is purely fictional and has no actual basis in real-world events or vulnerabilities.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-28197 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options