Lucene search
+L

2 matches found

OSV
OSV
added 2025/10/29 10:21 p.m.9 views

GHSA-XRW9-R35X-X878 Zitadel allows brute-forcing authentication factors

Summary A vulnerability in Zitadel allowed brute-force attack on OTP, TOTP and password allowing to impersonate the attacked user. Impact An attacker can perform an online brute-force attack on OTP, TOTP, and passwords. While Zitadel allows preventing online brute force attacks in scenarios like...

7.7CVSS6.9AI score0.00348EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2025/10/29 10:21 p.m.14 views

Zitadel allows brute-forcing authentication factors

Summary A vulnerability in Zitadel allowed brute-force attack on OTP, TOTP and password allowing to impersonate the attacked user. Impact An attacker can perform an online brute-force attack on OTP, TOTP, and passwords. While Zitadel allows preventing online brute force attacks in scenarios like...

9.8CVSS6.9AI score0.00348EPSS
SaveExploits0References5Affected Software2
Rows per page
Query Builder