CVE-2019-20174

Auth0 Lock before 11.21.0 allows XSS when additionalSignUpFields is used with an untrusted placeholder

published February 3, 2020

CVSS
—
EPSS
1%
Percentile
53.5
In the wild
Unconfirmed
What it is

Auth0 Lock before 11.21.0 allows XSS when additionalSignUpFields is used with an untrusted placeholder.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00724 · 53.5th percentile
Published
2020-02-03T17:13Z
EPSS history
Timeline
  • 03 FEB 17:13Z
    Auth0 Lock before 11.21.0 allows XSS when additionalSignUpFields is used with an untrusted placeholder
    cvelistv5