Vulnerabilities > Auth0 > Passport Wsfed Saml2

DATE CVE VULNERABILITY TITLE RISK
2022-12-13 CVE-2022-23505 Unspecified vulnerability in Auth0 Passport-Wsfed-Saml2
Passport-wsfed-saml2 is a ws-federation protocol and SAML2 tokens authentication provider for Passport.
network
low complexity
auth0
7.5
7.5
2017-12-27 CVE-2017-16897 Authentication Bypass by Spoofing vulnerability in Auth0 Passport-Wsfed-Saml2
A vulnerability has been discovered in the Auth0 passport-wsfed-saml2 library affecting versions < 3.0.5.
network
high complexity
auth0 CWE-290
8.1
8.1