Aspnet

aspnet

Vendor: Auth0 • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2018-15121

1Auth0

2Aspnet

Aspnet Owin

Nov 21, 2024

Aug 29, 2018

N/A· v4

8.8 HIGH· v3

6.8 MEDIUM· v2

An issue was discovered in Auth0 auth0-aspnet and auth0-aspnet-owin. Affected packages do not use or validate the state parameter of the OAuth 2.0 and OpenID Connect protocols. This leaves applications vulnerable to CSRF...Show more