CVE-2025-46345

creationtimestamp| type| source ---|---|--- 2025-05-02 18:19:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14554...

CVE-2025-46345

Auth0 Account Link Extension is an extension aimed to help link accounts easily. Versions 2.3.4 to 2.6.6 do not verify the signature of the provided JWT. This allows the user the ability to supply a forged token and the potential to access user information without proper authorization. This issue...

CVE-2025-46345 Auth0 Account Link Extension JWT Invalid Signature Validation

Auth0 Account Link Extension is an extension aimed to help link accounts easily. Versions 2.3.4 to 2.6.6 do not verify the signature of the provided JWT. This allows the user the ability to supply a forged token and the potential to access user information without proper authorization. This issue...

CVE-2025-46345

The CVE-2025-46345 entry concerns the Auth0 Account Link Extension. Versions 2.3.4–2.6.6 do not verify the JWT signature, allowing an attacker to present a forged token and potentially access user data without authorization. The issue is remedied in 2.6.7, 2.7.0, and 3.0.0, with a recommendation ...