UpHeron
All vulnerabilities

Servers and applications

CVE-2024-32967

Zitadel is an open source identity management system. In case ZITADEL could not connect to the database, connection information including db name, username and db host name could be returned to the user. This has been addressed in all supported release branches in a point release. There is no workaround since a patch is already available. Users are advised to upgrade.

Severity
Medium 5.3
Published
1 May 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
2.45.7, 2.46.7, 2.47.10, 2.48.5, 2.49.5, 2.50.3
Sources
NVD

Affected software

SoftwareAffected versions
ZITADELServers and applications · cpe:a:zitadel:zitadel
  • Every version before 2.45.7
  • From 2.46.0 before 2.46.7
  • From 2.47.0 before 2.47.10
  • From 2.48.0 before 2.48.5
  • From 2.49.0 before 2.49.5
  • From 2.50.0 before 2.50.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-32967
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-32967