Information Disclosure

github.com/zitadel/zitadel is vulnerable to information disclosure. The vulnerability is due to exposure of the total number of instance users through the totalResult field, which allows an authenticated attacker to infer sensitive usage metrics regardless of their permissions...