CVE-2019-16929

Source
https://nvd.nist.gov/vuln/detail/CVE-2019-16929
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-16929.json
Aliases
Published
2019-10-08T13:15:15Z
Modified
2023-11-29T07:15:10.230894Z
Details

Auth0 auth0.net before 6.5.4 has Incorrect Access Control because IdentityTokenValidator can be accidentally used to validate untrusted ID tokens.

References

Affected packages

Git / github.com/auth0/auth0.net

Affected ranges

Type
GIT
Repo
https://github.com/auth0/auth0.net
Events
Introduced
0The exact introduced commit is unknown
Last affected

Affected versions

release-5.*

release-5.10.0
release-5.11.0

release-6.*

release-6.0.0
release-6.1.0
release-6.2.0
release-6.3.0
release-6.4.0
release-6.5.0
release-6.5.1
release-6.5.2
release-6.5.3

v1.*

v1.11.1
v1.11.2
v1.11.3