Skip to content

CVE-2018-6873 The Auth0 authentication service before 2017-10-15 allows privilege escalation because the JWT audience is not validated.

CriticalCVSS 9.8 EPSS 2.2%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The Auth0 authentication service before 2017-10-15 allows privilege escalation because the JWT audience is not validated.

Affected products

ProductAffected versionsFixed in
auth0.js <= 8.10.1 No fix listed

References