PT-2018-17794

CVE-2018-6873

Published

2018-04-04

Updated

2019-10-03

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Auth0 versions prior to 2017-10-15

Description The issue allows for privilege escalation due to the lack of validation of the JWT audience.

Recommendations For versions prior to 2017-10-15, update to a version that includes the fix for the JWT audience validation issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾