1 matches found
Parse Server: JWT audience validation bypass in Google, Apple, and Facebook authentication adapters
Impact The Google, Apple, and Facebook authentication adapters use JWT verification to validate identity tokens. When the adapter's audience configuration option is not set clientId for Google/Apple, appIds for Facebook, JWT verification silently skips audience claim validation. This allows an...
9.8CVSS5.8AI score0.00525EPSS
SaveExploits0References3Affected Software1
20