Description

CSRF exists in the Auth0 authentication service through 14591 if the Legacy Lock API flag is enabled.

Remediation

References

https://auth0.com/docs/security/bulletins/cve-2018-6874

http://www.securityfocus.com/bid/103695

Related Vulnerabilities

CVE-2020-2280 Vulnerability in maven package io.jenkins.plugins:warnings-ng

CVE-2022-45875 Vulnerability in maven package org.apache.dolphinscheduler:dolphinscheduler-alert-plugins

CVE-2023-20863 Vulnerability in maven package org.springframework:spring-expression

CVE-2020-11009 Vulnerability in maven package org.rundeck:rundeck

CVE-2019-1003062 Vulnerability in maven package org.jenkins-ci.plugins:aws-cloudwatch-logs-publisher

Severity

Critical

Classification

CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Vendor Advisory Third Party Advisory VDB Entry