4 matches found
CVE-2018-6874
CSRF exists in the Auth0 authentication service through 14591 if the Legacy Lock API flag is enabled...
8.8CVSS7.4AI score
SaveExploits0References2
CVE-2018-6874
CSRF exists in the Auth0 authentication service through 14591 if the Legacy Lock API flag is enabled...
8.8CVSS8.8AI score0.00736EPSS
SaveExploits0References2
CVE-2018-6874
CVE-2018-6874 describes a CSRF flaw in Auth0's authentication service when the Legacy Lock API flag is enabled. The vulnerability allows an attacker to reuse a valid signed JWT to perform actions in the victim’s account if the user visits a malicious page. Documents indicate the issue affected Au...
8.8CVSS8.7AI score0.00736EPSS
SaveExploits0References2Affected Software1
20