CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2018/04/04 5:29 p.m.•12 views

CVE-2018-6874

CSRF exists in the Auth0 authentication service through 14591 if the Legacy Lock API flag is enabled...

8.8CVSS8.8AI score0.00778EPSS

Exploits0References2

OSV•added 2018/04/04 5:29 p.m.•12 views

CVE-2018-6874

CSRF exists in the Auth0 authentication service through 14591 if the Legacy Lock API flag is enabled...

8.8CVSS7.4AI score0.00778EPSS

Exploits0References2

CVE•added 2018/04/04 5:0 p.m.•49 views

CVE-2018-6874

CVE-2018-6874 describes a CSRF flaw in Auth0's authentication service when the Legacy Lock API flag is enabled. The vulnerability allows an attacker to reuse a valid signed JWT to perform actions in the victim’s account if the user visits a malicious page. Documents indicate the issue affected Au...

8.8CVSS8.7AI score0.00778EPSS

Exploits0References2Affected Software1