950 matches found
CVE-2017-17068
A cross-origin vulnerability has been discovered in the Auth0 auth0.js library affecting versions 8.12. This vulnerability allows an attacker to acquire authenticated users' tokens and invoke services on a user's behalf if the target site or application uses a popup callback page with...
CVE-2017-17068
The CVE-2017-17068 entry concerns Auth0’s auth0.js library prior to 8.12. A cross-origin vulnerability allows an attacker to obtain authenticated users’ tokens and invoke services on behalf of a user when a site uses a popup callback page via auth0.popup.callback(). Affected software: auth0.js
CVE-2017-17068
A cross-origin vulnerability has been discovered in the Auth0 auth0.js library affecting versions 8.12. This vulnerability allows an attacker to acquire authenticated users' tokens and invoke services on a user's behalf if the target site or application uses a popup callback page with...
PT-2017-14695
Name of the Vulnerable Software and Affected Versions Auth0 auth0.js library versions prior to 8.12 Description A cross-origin issue has been discovered in the Auth0 auth0.js library. This issue allows an attacker to acquire authenticated users' tokens and invoke services on a user's behalf if th...
CVE-2017-17068: Exposure of Sensitive Information to an Unauthorized Actor
A cross-origin vulnerability has been discovered in the Auth0 auth0.js library affecting versions 8.12. This vulnerability allows an attacker to acquire authenticated users' tokens and invoke services on a user's behalf if the target site or application uses a popup callback page with...
Critical vulnerabilities in JSON Web Token libraries
More info at https://auth0.com/blog/critical-vulnerabilities-in-json-web-token-libraries/...
cyprusweddingsmagazine.eu.auth0.com Open Redirect vulnerability
Vulnerable URL: https://cyprusweddingsmagazine.eu.auth0.com/v2/logout?returnTo=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 17.01.2017 Latest check for patch:| 17.01.2017 13:19 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alex...
Critical vulnerabilities in JSON Web Token libraries
More info at https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/...
Critical Vulnerabilities Affecting JSON Web Token Libraries
Critical vulnerabilities exist in several JSON Web Token JWT libraries – namely the JavaScript and PHP versions – that could let an attacker bypass the verification step. Tim McLean, a Canadian security researcher who specializes in cryptography and dug up the issues, points out that attackers...