high8.8
CVE-2018-7307
The Auth0 Auth0.js library before 9.3 has CSRF because it mishandles the case where the authorization response lacks the state parameter.
Impact
The Auth0 Auth0.js library before 9.3 has CSRF because it mishandles the case where the authorization response lacks the state parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Auth0 | Auth0.Js | before 9.3 |