CVE-2019-13483

Auth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before processing. This allows attackers to forge tokens and bypass authentication and authorization mechanisms...

@sysdoc/sysdoc-web-stack (1.0.0), open-stack (>=1.1.0, <=1.2.7) potentially affected by CVE-2019-13483 via passport-sharepoint (0.2.12)

passport-sharepoint NPM version 0.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on passport-sharepoint and may be impacted: - @sysdoc/sysdoc-web-stack 1.0.0 - open-stack =1.1.0, =1.2.7 Source cves: CVE-2019-13483 Source advisory:...

CVE-2019-13483

CVE-2019-13483 affects the Auth0 Passport-SharePoint package (before version 0.4.0). The root cause is that the implementation does not validate the JWT signature of an Access Token before processing, enabling attackers to forge tokens and bypass authentication and authorization mechanisms. The p...