Vulnerabilidades en Auth0
40 resultadosCVE-2025-48947HIGHNextJS-Auth0 SDK Vulnerable to CDN Caching of Session CookiesEPSS 0.4%CVE-2025-46572CRITICALpassport-wsfed-saml2 Has SAML Authentication Bypass via Signature WrappingEPSS 0.4%CVE-2025-68129MEDIUMAuth0-PHP SDK has Improper Audience ValidationEPSS 0.4%CVE-2026-85982CRITICALStored Cross-Site Scripting (XSS) in Auth0 AD/LDAP ConnectorEPSS 0.4%CVE-2025-46573HIGHpassport-wsfed-saml2 Has SAML Authentication Bypass via Attribute SmugglingEPSS 0.4%CVE-2023-6813MEDIUMLogin by Auth0 <= 4.6.0 - Reflected Cross-Site Scripting via wleEPSS 0.4%CVE-2025-58769LOWauth0-PHP: Improper File Type Handling in Bulk User ImportEPSS 0.4%CVE-2026-85473MEDIUMOut-of-Range Timestamp Claim Handling in auth0/java-jwtEPSS 0.3%CVE-2026-84685MEDIUMImproper Cache Isolation in auth0/react-native-auth0 SDK Web Platform Credential ManagementEPSS 0.3%CVE-2026-107370MEDIUMImproper Request Handling for Active Directory Logins in auth0-lockEPSS 0.3%CVE-2025-67716MEDIUMAuth0 Next.js SDK has Improper Validation of Query ParametersEPSS 0.3%CVE-2025-65945HIGHauth0/node-jws improper HMAC signature verification vulnerabilityEPSS 0.2%CVE-2026-34236HIGHAuth0 PHP SDK Insufficient Entropy in Cookie EncryptionEPSS 0.2%CVE-2026-107369MEDIUMImproper Validation of Post-Login Redirect URL in nextjs-auth0EPSS 0.2%CVE-2026-40155MEDIUMAuth0 Next.js SDK has Improper Proxy Cache LookupEPSS 0.2%CVE-2026-42280HIGHImproper Permission Checking in Auth.js SDKEPSS 0.2%CVE-2026-107371MEDIUMMissing Verification of auth_time Claim in auth0.jsEPSS 0.2%CVE-2025-67490MEDIUMAuth0 Next.js SDK has Improper Request Caching LookupEPSS 0.2%CVE-2026-85983HIGHLocal Privilege Escalation in Auth0 AD/LDAP ConnectorEPSS 0.2%CVE-2026-85981MEDIUMUnauthenticated Localhost Admin Panel in Auth0 AD/LDAP ConnectorEPSS 0.2%