CVE-2019-20173

概要

参考情報

• auth0.com/docs/security/bulletins/cve-2019-20173 · Vendor Advisory
• auth0/wp-auth0 release 3.11.3 · Release Notes
• wpvulndb.com/vulnerabilities/10059 · Third Party Advisory

login by auth0 のその他の脆弱性

• CVE-2020-7948高 8.8An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. A user can perform an insecure direct object reference.
• CVE-2020-7947緊急 9.8An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. It has numerous fields that can contain data that is pulled…
• CVE-2020-6753中 6.1The Login by Auth0 plugin before 4.0.0 for WordPress allows stored XSS on multiple pages, a different issue than CVE-2020-5392.