Lucene search

K
osvGoogleOSV:GHSA-45FH-G845-PJ9W
HistoryMay 24, 2022 - 4:51 p.m.

Auth0 Passport-SharePoint does not validate JWT signature

2022-05-2416:51:23
Google
osv.dev
6

0.001 Low

EPSS

Percentile

39.7%

Auth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before processing. This allows attackers to forge tokens and bypass authentication and authorization mechanisms.

CPENameOperatorVersion
passport-sharepointlt0.4.0

0.001 Low

EPSS

Percentile

39.7%

Related for OSV:GHSA-45FH-G845-PJ9W