CyberRota Analysis
AI-GeneratedZITADEL versions prior to 4.15.3 are vulnerable to a security flaw in the Login V2 OIDC and SAML error handling, which allows an attacker to exploit the defaultRedirectUri without proper validation. This could lead to the execution of malicious JavaScript or data URIs in a user's browser, potentially compromising user sessions or sensitive data. Organizations using ZITADEL for identity management should prioritize upgrading to version 4.15.3 to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ZITADEL is an open source identity management platform. Prior to 4.15.3, ZITADEL Login V2 OIDC and SAML FailedPrecondition error paths return loginSettings.defaultRedirectUri to router.push without applying the isSafeRedirectUri check, allowing an organization or instance administrator to store a javascript or data URI that can execute in a user's browser when an affected login error path is reached. This issue is fixed in version 4.15.3.