VendorsAuth0lockall versions
Vulnerabilities

Auth0 Lock

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2021-32641
Reflected XSS when using flashMessages
Published 2021-06-04 · Modified
8.1EPSS 0.015
CVE-2020-15119
DOM-based XSS in auth0-lock
Published 2020-08-19 · Modified
6.4EPSS 0.005
CVE-2019-20174
Auth0 Lock before 11.21.0 allows XSS when additionalSignUpFields is used with an untrusted placeholder.
Published 2020-02-03 · Modified
6.1EPSS 0.007
CVE-2022-29172
HTML injection with additional signup fields
Published 2022-05-05 · Modified
6.1EPSS 0.006