CVE-2018-7307

CVE-2018-7307

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The Auth0 Auth0.js library before 9.3 has CSRF because it mishandles the case where the authorization response lacks the state parameter.

CVSS 8.8 · High · EPSS 0.5% · Fix available

Published

2018-03-06T15:00:00.000Z

Updated

2024-08-05T06:24:11.872Z

Stack: node

Check your server →