Lucene search
GoogleOSV:CVE-2020-15119HistoryAug 20, 2020 - 1:17 a.m.
CVE-2020-15119
2020-08-2001:17:11
Google
osv.dev
8
auth0
lock
xss
vulnerability
dom
update
application
users
cross-site scripting
software
EPSS
0.001
Percentile
22.7%
In auth0-lock versions before and including 11.25.1, dangerouslySetInnerHTML is used to update the DOM. When dangerouslySetInnerHTML is used, the application and its users might be exposed to cross-site scripting (XSS) attacks.
Related
nvd
nvd
CVE-2020-15119
2020-08-20 01:17:11
prion
prion
Cross site scripting
2020-08-20 01:17:00
osv
osv
DOM-based XSS in auth0-lock
2020-08-19 21:05:03
github
github
DOM-based XSS in auth0-lock
2020-08-19 21:05:03
githubexploit
githubexploit
Exploit for Cross-site Scripting in Auth0 Lock
2020-12-01 09:45:48
veracode
veracode
Cross-Site Scripting (XSS)
2020-08-20 02:19:31
cvelist
cvelist
CVE-2020-15119 DOM-based XSS in auth0-lock
2020-08-19 21:20:11
cve
cve
CVE-2020-15119
2020-08-20 01:17:11
nodejs
nodejs
DOM-based XSS
2020-08-19 21:15:29