Skip to contentAuth0 vulnerabilities
Newest
- auth0 aspnet, aspnet-owin +1 moreAuth0-ASPNET and Auth0-ASPNET-Owin vulnerable to Cross-Site Request ForgeryCVE-2018-151218.8 High
- auth0 angular-jwtAuth0 angular-jwt misinterprets allowlist as regexCVE-2018-11537Fix available6.5 Medium
- auth0 jsonwebtoken, hackerone jsonwebtoken node module +1 moreVerification Bypass in jsonwebtokenCVE-2015-9235Public exploitFix available9.8 Critical
- auth0 auth0.jsCross-Site Request Forgery (CSRF) in Auth0CVE-2018-6874Fix available8.8 High
- auth0 auth0.jsThe Auth0 authentication service before 2017-10-15 allows privilege escalation because the JWT...CVE-2018-68739.8 Critical
- auth0 auth0.jsAuth0-js bypasses CSRF checksCVE-2018-7307Fix available8.8 High
- auth0 passport-wsfed-saml2passport-wsfed-saml2 vulnerable to Signature Bypass in SAML2 tokenCVE-2017-16897Fix available8.1 High
- auth0 auth0.jsauth0-js Privilege Escalation VulnerabilityCVE-2017-17068Fix available7.5 High