NetSight
high8.8

CVE-2018-6874

CSRF exists in the Auth0 authentication service through 14591 if the Legacy Lock API flag is enabled.

Impact

CSRF exists in the Auth0 authentication service through 14591 if the Legacy Lock API flag is enabled.

Affected products

VendorProductAffected versions
Auth0Auth0.Js
through 8.12.1

Weakness classification

References