Lucene search
Auth0Auth0.js*
3 matches found
CVE-2018-6874
CSRF exists in the Auth0 authentication service through 14591 if the Legacy Lock API flag is enabled.
8.8CVSS8.7AI score0.00182EPSS
CVE-2018-6873
The Auth0 authentication service before 2017-10-15 allows privilege escalation because the JWT audience is not validated.
9.8CVSS9.8AI score0.04585EPSS
CVE-2018-7307
The Auth0 Auth0.js library before 9.3 has CSRF because it mishandles the case where the authorization response lacks the state parameter.
8.8CVSS8.7AI score0.0026EPSS