Auth0 Aspnet vulnerabilities

1 vulnerability

Known vulnerabilities in Auth0 Aspnet, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2018-15121auth0aspnet+3
EPSS score
0.49%
An issue was discovered in Auth0 auth0-aspnet and auth0-aspnet-owin. Affected packages do not use or validate the state parameter of the OAuth 2.0 and OpenID Connect protocols. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations.