CyberRota Analysis
AI-GeneratedZITADEL's identity management platform versions 4.0.0-rc.1 through 4.15.1 are vulnerable due to inadequate validation of user-defined URLs in HTTP notification channels, OIDC BackChannel Logout, and SAML metadata URL fetches. This flaw could allow attackers to exploit server-side request forgery (SSRF) vulnerabilities, potentially accessing internal resources or redirecting traffic through malicious endpoints. Organizations using affected versions should prioritize upgrading to version 4.15.2 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ZITADEL is an open source identity management platform. From 4.0.0-rc.1 through 4.15.1, ZITADEL's HTTP notification channels, OIDC BackChannel Logout, and SAML metadata URL fetches do not consistently validate user-defined URLs against protected denylist handling, allowing server-side requests to loopback, internal IP, link-local, or redirected endpoints through DNS rebinding, redirects, or protocol downgrades. This issue is fixed in version 4.15.2.