CVE-2019-16929
Auth0 auth0.net before 6.5.4 has Incorrect Access Control because IdentityTokenValidator can be accidentally used to validate untrusted ID tokens.
CVSS 3.1 · 7.5 High
EPSS < 1%
KEV · Not listed
Vendors
Products