CVE-2023-44399

CVE-2023-44399 — ZITADEL password reset information disclosure . The vulnerability affects ZITADEL versions 2.37.2 and earlier where an attacker could verify whether an account exists by abusing the password reset flow, even when the “Ignoring unknown usernames” setting is enabled. The root cause...