Lock

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-29172 npm MEDIUM PATCH This Month

Auth0 is an authentication broker that supports both social and enterprise identity providers, including Active Directory, LDAP, Google Apps, and Salesforce. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

Google XSS Lock

NVD GitHub

CVSS 3.1

6.1

EPSS

0.6%

CVE-2021-32641 npm MEDIUM POC PATCH This Month

auth0-lock is Auth0's signin solution. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE XSS Lock

NVD GitHub

CVSS 3.1

6.1

EPSS

1.5%

CVE-2020-15119 npm MEDIUM PATCH This Month

In auth0-lock versions before and including 11.25.1, dangerouslySetInnerHTML is used to update the DOM. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Lock

NVD GitHub

CVSS 3.1

5.4

EPSS

0.5%

CVE-2022-29172 npm

EPSS 1% CVSS 6.1

MEDIUM PATCH This Month

Google XSS Lock

NVD GitHub

CVE-2021-32641 npm

EPSS 2% CVSS 6.1

MEDIUM POC PATCH This Month

auth0-lock is Auth0's signin solution. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE XSS Lock

NVD GitHub

CVE-2020-15119 npm

EPSS 1% CVSS 5.4

MEDIUM PATCH This Month

XSS Lock

NVD GitHub