Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
auth0

auth0 lock vulnerabilities

3 published CVEs name auth0 lock among the affected products.

All 3 in the listAtom feed of new CVEs
Published CVEs
3
Last 12 months
0
Critical
0
Known exploited
0

Critical 0High 1Medium 2Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20201
  2. 20211
  3. 20221

Newest CVEs

  • CVE-2022-29172

    HTML injection with additional signup fields

    auth0 · lock

    Medium6.1
  • CVE-2021-32641

    Reflected XSS when using flashMessages

    auth0 · lock

    High8.1
  • CVE-2020-15119

    DOM-based XSS in auth0-lock

    auth0 · lock

    Medium6.4

Most common weaknesses

  1. CWE-79 Cross-site scripting (XSS)3