CVE-2020-5263

auth0.js (NPM package auth0-js) greater than version 8.0.0 and before version 9.12.3 has a vulnerability. In the case of an (authentication) error, the error object returned by the library contains the original request of the user, which may include the plaintext password the user entered. If the error object is exposed or logged without modification, the application risks password exposure. This is fixed in version 9.12.3

• CWE-522
• CWE-522

• https://github.com/auth0/auth0.js/commit/355ca749b229fb93142f0b3978399b248d710828Patch, Third Party Advisory
• https://github.com/auth0/auth0.js/security/advisories/GHSA-prfq-f66g-43mpThird Party Advisory
• https://github.com/auth0/auth0.js/commit/355ca749b229fb93142f0b3978399b248d710828Patch, Third Party Advisory
• https://github.com/auth0/auth0.js/security/advisories/GHSA-prfq-f66g-43mpThird Party Advisory

Published

Apr 9, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-5257In Administrate (rubygem) before version 0.13.0, when sortin…8.1
• CVE-2020-5258In affected versions of dojo (NPM package), the deepCopy met…7.7
• CVE-2020-5259In affected versions of dojox (NPM package), the jqMix metho…8.6
• CVE-2020-5260Affected versions of Git have a vulnerability whereby Git ca…7.5
• CVE-2020-5261Saml2 Authentication services for ASP.NET (NuGet package Sus…6.8
• CVE-2020-5262In EasyBuild before version 4.1.2, the GitHub Personal Acces…5.5
• CVE-2020-5264In PrestaShop before version 1.7.6.5, there is a reflected X…6.1
• CVE-2020-5265In PrestaShop between versions 1.7.6.1 and 1.7.6.5, there is…6.1
• CVE-2020-5266In the ps_link module for PrestaShop before version 3.1.0, t…5.4
• CVE-2020-5267In ActionView before versions 6.0.2.2 and 5.2.4.2, there is …4.8
• CVE-2020-5268In Saml2 Authentication Services for ASP.NET versions before…7.3
• CVE-2020-5269In PrestaShop between versions 1.7.6.1 and 1.7.6.5, there is…6.1