Skip to content
OpenAdvisories

Product · auth0

lock

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2022-29172

    HTML injection with additional signup fields

    Auth0 is an authentication broker that supports both social and enterprise identity providers, including Active Directory, LDAP, Google Apps, and Salesforce. In versions before `11.33.0`, when the “additional signup fields” feature [is configured](https://git…

    auth0 lock auth0-lock npm
  • Medium 6.4
    CVE-2020-15119

    DOM-based XSS in auth0-lock

    In auth0-lock versions before and including 11.25.1, dangerouslySetInnerHTML is used to update the DOM. When dangerouslySetInnerHTML is used, the application and its users might be exposed to cross-site scripting (XSS) attacks.

    auth0 lock auth0-lock npm