Lucene search
Veracode Vulnerability DatabaseVERACODE:35413HistoryMay 06, 2022 - 12:59 p.m.
Cross-Site Scripting (XSS)
2022-05-0612:59:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
cross-site scripting
auth0-lock
signup
actions.js
sanitization
arbitrary javascript
attacker
EPSS
0.001
Percentile
26.2%
auth0-lock is vulnerable to cross-site scripting. The vulnerability exists in signUp function in actions.js due to lack of sanitization in the additional sign-up fields which allows an attacker to inject and execute arbitrary javascript.
Related
osv
osv
CVE-2022-29172
2022-05-05 23:15:09
Cross-site Scripting in Auth0 Lock
2022-05-24 20:49:20
cve
cve
CVE-2022-29172
2022-05-05 23:15:09
cvelist
cvelist
CVE-2022-29172 HTML injection with additional signup fields
2022-05-05 22:50:09
prion
prion
Design/Logic Flaw
2022-05-05 23:15:00
github
github
Cross-site Scripting in Auth0 Lock
2022-05-24 20:49:20
nvd
nvd
CVE-2022-29172
2022-05-05 23:15:09