Lucene search

Lock Security Vulnerabilities - 2020

cve

CVE-2019-20174

Auth0 Lock before 11.21.0 allows XSS when additionalSignUpFields is used with an untrusted placeholder.

6.1CVSS

5.9AI Score

0.001EPSS

2020-02-03 06:15 PM

cve

CVE-2020-15119

In auth0-lock versions before and including 11.25.1, dangerouslySetInnerHTML is used to update the DOM. When dangerouslySetInnerHTML is used, the application and its users might be exposed to cross-site scripting (XSS) attacks.

6.4CVSS

5.1AI Score

0.001EPSS

2020-08-20 01:17 AM