high7.5
CVE-2019-16929
Auth0 auth0.net before 6.5.4 has Incorrect Access Control because IdentityTokenValidator can be accidentally used to validate untrusted ID tokens.
Impact
Auth0 auth0.net before 6.5.4 has Incorrect Access Control because IdentityTokenValidator can be accidentally used to validate untrusted ID tokens.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Auth0 | Auth0.Net | from 5.8.0 through 6.5.3 |