Description

CSRF exists in the Auth0 authentication service through 14591 if the Legacy Lock API flag is enabled.

Remediation

References

http://www.securityfocus.com/bid/103695

https://auth0.com/docs/security/bulletins/cve-2018-6874

Related Vulnerabilities

CVE-2017-16029 Vulnerability in npm package hostr

CVE-2017-1000228 Vulnerability in npm package ejs

CVE-2016-8750 Vulnerability in maven package org.apache.karaf.jaas:org.apache.karaf.jaas.modules

CVE-2022-23647 Vulnerability in npm package prismjs

CVE-2019-19771 Vulnerability in npm package bictoin-ops

Severity

Critical

Classification

CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Third Party Advisory VDB Entry Vendor Advisory