Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2025/11/05 7:52 p.m.11 views

IDOR Vulnerabilities in ZITADEL's Organization API allows Cross-Tenant Data Tempering

Summary ZITADEL's Organization V2Beta API contains Insecure Direct Object Reference IDOR vulnerabilities that allow authenticated users with specific administrator roles within one organization to access and modify data belonging to other organizations. Impact ZITADEL's Organization V2Beta API,...

8.7CVSS6.7AI score0.00283EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder