CVE-2019-13483

Auth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before processing

published July 25, 2019

CVSS
—
EPSS
1%
Percentile
45.9
In the wild
Unconfirmed
What it is

Auth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before processing. This allows attackers to forge tokens and bypass authentication and authorization mechanisms.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00560 · 45.9th percentile
Published
2019-07-25T19:34Z
EPSS history
Timeline
  • 25 JUL 19:34Z
    Auth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before processing
    cvelistv5