← Back

Auth0

auth0

41 CVEs • 21 products

Products (21)

Click to collapse
Toggle
Auth0.js
auth0.js
7 CVEs
Nextjs Auth0
nextjs-auth0
5 CVEs
Jsonwebtoken
jsonwebtoken
4 CVEs
Lock
lock
4 CVEs
Login By Auth0
login_by_auth0
4 CVEs
Wp Auth0
wp-auth0
3 CVEs
Passport Wsfed Saml2
passport-wsfed-saml2
2 CVEs
Express Openid Connect
express_openid_connect
2 CVEs
Auth0 Php
auth0-php
2 CVEs
Angular Jwt
angular-jwt
1 CVE
Aspnet
aspnet
1 CVE
Aspnet Owin
aspnet-owin
1 CVE
Auth0 Wcf Service Jwt
auth0-wcf-service-jwt
1 CVE
Passport Sharepoint
passport-sharepoint
1 CVE
Auth0.net
auth0.net
1 CVE
Express Jwt
express-jwt
1 CVE
Omniauth Auth0
omniauth-auth0
1 CVE
Ad/ldap Connector
ad/ldap_connector
1 CVE
Laravel Auth0
laravel-auth0
1 CVE
Symfony
symfony
1 CVE
Node Jws
node-jws
1 CVE

CVEs (41)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-17068
1Auth0
1Auth0.js
May 13, 2026
Dec 6, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A cross-origin vulnerability has been discovered in the Auth0 auth0.js library affecting versions < 8.12. This vulnerability allows an attacker to acquire authenticated users' tokens and invoke services on a user's behal...Show more
A cross-origin vulnerability has been discovered in the Auth0 auth0.js library affecting versions < 8.12. This vulnerability allows an attacker to acquire authenticated users' tokens and invoke services on a user's behalf if the target site or application uses a popup callback page with auth0.popup.callback().Show less