Post

Rajeev R Sharma

@rajeev.dev

blog.invidelabs.comAn XSS in a low-priority app can compromise your entire Auth0 tenantA cross-site scripting flaw in a minor internal app can chain with Auth0's default grant settings to reach other applications and APIs across the same tenant. Here's what the attack looks like and wha...

22/6/26, 2:40 pm·0 reposts·1 like