Lucene search

K
osvGoogleOSV:CVE-2019-13483
HistoryJul 25, 2019 - 8:15 p.m.

CVE-2019-13483

2019-07-2520:15:11
Google
osv.dev
2

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.7%

Auth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before processing. This allows attackers to forge tokens and bypass authentication and authorization mechanisms.

CPENameOperatorVersion
passport-sharepointeq0.3.0

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.7%

Related for OSV:CVE-2019-13483