GHSA-c9cg-q8r2-xvjq

Source

https://github.com/advisories/GHSA-c9cg-q8r2-xvjq

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/10/GHSA-c9cg-q8r2-xvjq/GHSA-c9cg-q8r2-xvjq.json

Aliases

• CVE-2019-16929

Published

2019-10-24T20:56:12Z

Modified

2023-11-08T04:01:22.386634Z

Details

Auth0 auth0.net before 6.5.4 has Incorrect Access Control because IdentityTokenValidator can be accidentally used to validate untrusted ID tokens.

References

• https://nvd.nist.gov/vuln/detail/CVE-2019-16929
• https://auth0.com/docs/security/bulletins/cve-2019-16929