Read the docs

auth0

Records58All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical11CVSS 9.0–10.0
CVSS high24CVSS 7.0–8.9

Exploited now

auth0 records in CISA KEV

No auth0 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Auth0.js 7 records MEDIUM Nextjs-auth0 5 records LOW Jsonwebtoken 4 records MEDIUM Lock 4 records LOW Login By Auth0 4 records MEDIUM Wp-auth0 3 records MEDIUM Auth0-php 2 records MEDIUM Express Openid Connect 2 records MEDIUM

Records

2 records in Express Openid Connect · all components

TI-2021-18081 CVE-2021-41246 · GHSA-7rg2-qxmf-hhx9

Session fixation in express-openid-connect

Priority MEDIUM 40

Express OpenID Connect is express JS middleware implementing sign on for Express web apps using OpenID Connect.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00924 Published 2021-12-09 Fixed in 2.5.2 CWE-384
TI-2022-08607 CVE-2022-24794 · GHSA-7p99-3798-f85c

Open Redirect in express-openid-connect

Priority LOW 34

Express OpenID Connect is an Express JS middleware implementing sign on for Express web apps using OpenID Connect.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00738 Published 2022-03-31 Fixed in 2.7.2 CWE-601
Open these records in search →