CVE-2025-57770

{"id": "CVE-2025-57770", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2025-08-22T17:15:35.997", "references": [{"url": "https://github.com/zitadel/zitadel/commit/7abe759c95cb360524d88b51744d03cbb6e4dcdb", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/zitadel/zitadel/releases/tag/v2.71.15", "tags": ["Release Notes"], "source": "security-advisories@github.com"}, {"url": "https://github.com/zitadel/zitadel/releases/tag/v3.4.0", "tags": ["Release Notes"], "source": "security-advisories@github.com"}, {"url": "https://github.com/zitadel/zitadel/releases/tag/v4.0.3", "tags": ["Release Notes"], "source": "security-advisories@github.com"}, {"url": "https://github.com/zitadel/zitadel/security/advisories/GHSA-g9c3-xh6v-fr86", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://zitadel.com/docs/self-hosting/manage/production#limits-and-quotas", "tags": ["Product"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-203"}]}], "descriptions": [{"lang": "en", "value": "The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Versions 4.0.0 to 4.0.2, 3.0.0 to 3.3.6, and all versions prior to 2.71.15 are vulnerable to a username enumeration issue in the login interface. The login UI includes a security feature, Ignoring unknown usernames, that is intended to prevent username enumeration by returning a generic response for both valid and invalid usernames. This vulnerability allows an unauthenticated attacker to bypass this protection by submitting arbitrary userIDs to the select account page and distinguishing between valid and invalid accounts based on the system's response. For effective exploitation, an attacker needs to iterate through possible userIDs, but the impact can be limited by implementing rate limiting or similar measures. The issue has been patched in versions 4.0.3, 3.4.0, and 2.71.15."}, {"lang": "es", "value": "El software de infraestructura de identidad de c\u00f3digo abierto Zitadel permite a los administradores desactivar el autorregistro de usuarios. Las versiones 4.0.0 a 4.0.2, 3.0.0 a 3.3.6 y todas las versiones anteriores a la 2.71.15 son vulnerables a un problema de enumeraci\u00f3n de nombres de usuario en la interfaz de inicio de sesi\u00f3n. Esta interfaz incluye una funci\u00f3n de seguridad, Ignorar nombres de usuario desconocidos, que impide la enumeraci\u00f3n de nombres de usuario devolviendo una respuesta gen\u00e9rica tanto para nombres de usuario v\u00e1lidos como no v\u00e1lidos. Esta vulnerabilidad permite a un atacante no autenticado eludir esta protecci\u00f3n enviando ID de usuario arbitrarios a la p\u00e1gina de selecci\u00f3n de cuenta y distinguiendo entre cuentas v\u00e1lidas e inv\u00e1lidas seg\u00fan la respuesta del sistema. Para una explotaci\u00f3n eficaz, un atacante debe iterar entre los posibles ID de usuario, pero el impacto puede limitarse implementando una limitaci\u00f3n de velocidad o medidas similares. El problema se ha corregido en las versiones 4.0.3, 3.4.0 y 2.71.15."}], "lastModified": "2025-08-27T19:12:57.573", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5A53891-3BA9-4CEB-82AC-B9F39CD1A02E", "versionEndExcluding": "2.71.15"}, {"criteria": "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3D35DEF8-57A6-4ECF-9737-7604002DEE70", "versionEndExcluding": "3.4.0", "versionStartIncluding": "3.0.0"}, {"criteria": "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B15FCB28-4B32-45DA-9566-2F774895CF1F", "versionEndExcluding": "4.0.3", "versionStartIncluding": "4.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}