Description
CSRF exists in the Auth0 authentication service through 14591 if the Legacy Lock API flag is enabled.
Remediation
References
http://www.securityfocus.com/bid/103695
https://auth0.com/docs/security/bulletins/cve-2018-6874
Related Vulnerabilities
CVE-2022-25852 Vulnerability in npm package libpq
CVE-2017-7678 Vulnerability in maven package org.apache.spark:spark-core
CVE-2019-17570 Vulnerability in maven package org.apache.xmlrpc:xmlrpc-client
CVE-2021-20085 Vulnerability in npm package backbone-query-parameters
CVE-2021-45851 Vulnerability in npm package @frangoteam/fuxa