critical9.8
CVE-2018-6873
The Auth0 authentication service before 2017-10-15 allows privilege escalation because the JWT audience is not validated.
Impact
The Auth0 authentication service before 2017-10-15 allows privilege escalation because the JWT audience is not validated.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Auth0 | Auth0.Js | through 8.10.1 |