Operation on a Resource after Expiration or Release Affecting github.com/zitadel/zitadel/v2/internal/integration package, versions <2.54.10 >=2.55.0 <2.55.8 >=2.56.0 <2.56.6 >=2.57.0 <2.57.5 >=2.58.0 <2.58.5 >=2.59.0 <2.59.3 >=2.60.0 <2.60.2 >=2.61.0 <2.61.1 >=2.62.0 <2.62.1
Threat Intelligence
EPSS
0.09% (39th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-GOLANG-GITHUBCOMZITADELZITADELV2INTERNALINTEGRATION-8062336
- published 20 Sep 2024
- disclosed 19 Sep 2024
- credit Unknown
Introduced: 19 Sep 2024
CVE-2024-47000 Open this link in a new tabHow to fix?
Upgrade github.com/zitadel/zitadel/v2/internal/integration to version 2.54.10, 2.55.8, 2.56.6, 2.57.5, 2.58.5, 2.59.3, 2.60.2, 2.61.1, 2.62.1 or higher.
Overview
Affected versions of this package are vulnerable to Operation on a Resource after Expiration or Release due to the user account deactivation mechanism. An attacker can retain access to applications and resources by requesting tokens using deactivated service accounts.