A glitch in Auth0 could allow attackers to spoof a legitimate website and collect sensitive information from visitors.
Source: Threadpost