EUVD-2021-0792

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Vulnerability in react-adal allows attacker JWT tokens to be treated as valid due to storage flaw

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2020-7787	9 Dec 202020:32	–	circl
CNNVD	Salvoravida React-adal Authorization Issues Vulnerability	9 Dec 202000:00	–	cnnvd
CVE	CVE-2020-7787	9 Dec 202016:45	–	cve
Cvelist	CVE-2020-7787 Improper Authentication	9 Dec 202016:45	–	cvelist
Github Security Blog	Improper Authentication in react-adal	13 Apr 202115:22	–	github
NVD	CVE-2020-7787	9 Dec 202017:15	–	nvd
OSV	CVE-2020-7787	9 Dec 202017:15	–	osv
OSV	GHSA-7MPX-VG3C-CMR4 Improper Authentication in react-adal	13 Apr 202115:22	–	osv
Prion	Input validation	9 Dec 202017:15	–	prion
Snyk	Improper Authentication	16 Oct 202016:53	–	snyk

[
  {
    "enisaIdVendor": [
      {
        "id": "11ff2302-95b1-3aa5-ab80-308d3519a81f",
        "vendor": {
          "name": "n/a"
        }
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-7787
github	www.github.com/salvoravida/react-adal/pull/115
github	www.github.com/salvoravida/react-adal/commit/74158dba1647b12fe96fa401e306a6287fe9e2a9
snyk	www.snyk.io/vuln/SNYK-JS-REACTADAL-1018907
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

8.2High risk

Vulners AI Score8.2

CVSS 3.18.2

CVSS 25

EPSS0.00267