Description
The Auth0 authentication service before 2017-10-15 allows privilege escalation because the JWT audience is not validated.
Remediation
References
http://www.securityfocus.com/bid/103695
https://auth0.com/docs/security/bulletins/cve-2018-6873
Related Vulnerabilities
CVE-2019-0200 Vulnerability in maven package org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol
CVE-2020-28433 Vulnerability in npm package node-latex-pdf
CVE-2022-29257 Vulnerability in npm package electron
CVE-2022-36007 Vulnerability in maven package com.github.jlangch:venice
CVE-2018-8028 Vulnerability in maven package org.apache.sentry:sentry-binding-hive