Unrated
The Auth0 authentication service before 2017-10-15 allows privilege escalation because the JWT audience is not validated.
CVE-2018-6873
First seen on SecPulse
References
- advisory securityfocus.com
- advisory auth0.com