Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
Auth0Auth0.js

2 matches found

CVE
CVE•added 2018/04/04 5:29 p.m.•36 views

CVE-2018-6873

The Auth0 authentication service before 2017-10-15 allows privilege escalation because the JWT audience is not validated.

9.8CVSS9.8AI score0.04585EPSS
CVE
CVE•added 2018/04/04 5:29 p.m.•36 views

CVE-2018-6874

CSRF exists in the Auth0 authentication service through 14591 if the Legacy Lock API flag is enabled.

8.8CVSS8.7AI score0.00182EPSS