Skip to content
OpenAdvisories

Package · NuGet

auth0-aspnet

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    CVE-2018-15121

    Auth0-ASPNET and Auth0-ASPNET-Owin vulnerable to Cross-Site Request Forgery

    An issue was discovered in Auth0 auth0-aspnet and auth0-aspnet-owin. Affected packages do not use or validate the state parameter of the OAuth 2.0 and OpenID Connect protocols. This leaves applications vulnerable to CSRF attacks during authentication and auth…

    auth0-aspnet Auth0-ASPNET-Owin NuGet