Description
The Auth0 authentication service before 2017-10-15 allows privilege escalation because the JWT audience is not validated.
Remediation
References
http://www.securityfocus.com/bid/103695
https://auth0.com/docs/security/bulletins/cve-2018-6873
Related Vulnerabilities
CVE-2020-2162 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2021-21363 Vulnerability in maven package io.swagger:swagger-generator
CVE-2021-21349 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2023-45648 Vulnerability in maven package org.apache.tomcat:tomcat
CVE-2020-27223 Vulnerability in maven package org.eclipse.jetty:jetty-server