NuGet/Auth0-ASPNET-Owin CVE-2018-15121: high 8.8, EPSS 0.49%
Auth0-ASPNET and Auth0-ASPNET-Owin vulnerable to Cross-Site Request Forgery
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.3.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-mmhr-3jr7-qj2p
- https://nvd.nist.gov/vuln/detail/CVE-2018-15121
- https://auth0.com/docs/security/bulletins/cve-2018-15121
- https://github.com/auth0/auth0-aspnet-owin
- https://www.nuget.org/packages/Auth0-ASPNET-Owin
CVE-2018-15121 · published · modified · JSON