Zitadel
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 63 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 31, 2022 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →ZITADEL before 4.16.2 Account Pre-Hijacking via Forged External IdP Callback
Zitadel before 4.16.2 SSRF via Organization Domain HTTP Verification
ZITADEL before 3.4.14 and 4.16.2 Account Takeover via Passkey Enrollment
ZITADEL before 4.17.1 Authentication Bypass via Login V2 for Deactivated Organizations
ZITADEL before 4.17.1 Authentication Bypass via Login V2 OTP returnCode
ZITADEL before 4.17.1 Unauthenticated MFA Enrollment via Login V1 Init Handlers
ZITADEL before 3.4.15 and 4.17.1 Cross-Organization Account Takeover via Passkey Enrollment
ZITADEL before 4.17.3 Account Takeover via External IdP Linking
ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokens
ZITADEL before 4.17.3 Cross-Organization Authentication Method Enumeration via User Service
Monitor Zitadel in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.