← All advisories

Critical severity9.8OSV Advisory· Published Apr 4, 2018· Updated Jun 17, 2026

CVE-2018-6873

CVE-2018-6873

Description

The Auth0 authentication service before 2017-10-15 allows privilege escalation because the JWT audience is not validated.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Auth0/Auth0.jsOSV3 versions
v8.10.1+ 2 more
- (no CPE)range: v8.10.1
- cpe:2.3:a:auth0:auth0.js:*:*:*:*:*:*:*:*range: <=8.10.1
- (no CPE)range: <2017-10-15

Patches

Vulnerability mechanics

References

2

www.securityfocus.com/bid/103695nvdThird Party AdvisoryVDB Entry
auth0.com/docs/security/bulletins/cve-2018-6873nvdVendor Advisory

News mentions

0

No linked articles in our index yet.