GHSA-c9cg-q8r2-xvjq
Improper Authentication in Auth0.AuthenticationApi
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| NuGet | Auth0.AuthenticationApi | >= 5.8.0, < 6.5.4 | 6.5.4 |
Details
As written in the advisory (Markdown source, shown as plain text).
Auth0 auth0.net before 6.5.4 has Incorrect Access Control because IdentityTokenValidator can be accidentally used to validate untrusted ID tokens.
References
External links from the advisory. They lead to third-party sites.