Description
CSRF exists in the Auth0 authentication service through 14591 if the Legacy Lock API flag is enabled.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | auth0-js | < 9.0.0 | 9.0.0 | GHSA-wv26-rj8c-4r33 |
High · 8.8
CVE-2018-6874
EUVD-2018-0785GHSA-wv26-rj8c-4r33
Cross-Site Request Forgery (CSRF) in Auth0
Published Apr 4, 2018 · Updated Aug 5, 2024 · Assigned by mitre