CVE-2018-6873

Description

References

• securityfocus.com/bid/103695 · Third Party Advisory
• auth0.com/docs/security/bulletins/cve-2018-6873 · Vendor Advisory

Más vulnerabilidades de auth0.js

• CVE-2026-42280ALTO 7.1Auth0.js is a client-side JavaScript library for Auth0. From 8.11.0 to 9.32.0, under specific preconditions, the Auth0.js SDK may improperly…
• CVE-2020-15125ALTO 7.7In auth0 (npm package) versions before 2.27.1, a DenyList of specific keys that should be sanitized from the request object contained in the…
• CVE-2020-5263MEDIO 4.9auth0.js (NPM package auth0-js) greater than version 8.0.0 and before version 9.12.3 has a vulnerability. In the case of an (authentication)…
• CVE-2018-6874ALTO 8.8CSRF exists in the Auth0 authentication service through 14591 if the Legacy Lock API flag is enabled.
• CVE-2018-7307ALTO 8.8The Auth0 Auth0.js library before 9.3 has CSRF because it mishandles the case where the authorization response lacks the state parameter.