Lucene search

K

Nextjs-auth0 Security Vulnerabilities

cve
cve

CVE-2021-43812

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions before 1.6.2 do not filter out certain returnTo parameter values from the login url, which expose the application to an open redirect vulnerability. Users are advised to upgrade as soon as...

6.4CVSS

6.2AI Score

0.001EPSS

2021-12-16 07:15 PM
34
cve
cve

CVE-2021-32702

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions before and including 1.4.1 are vulnerable to reflected XSS. An attacker can execute arbitrary code by providing an XSS payload in the error query parameter which is then processed by the...

8CVSS

6.4AI Score

0.002EPSS

2021-06-25 05:15 PM
53
4