High severity7.3NVD Advisory· Published Jul 25, 2019· Updated Jun 17, 2026

CVE-2019-13483

Description

Auth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before processing. This allows attackers to forge tokens and bypass authentication and authorization mechanisms.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
passport-sharepointnpm	< 0.4.0	0.4.0

Affected products

Auth0/Passport-SharePoint
cpe:2.3:a:auth0:passport-sharepoint:*:*:*:*:*:*:*:*
Range: <0.4.0
Auth0/Passport-SharePointdescription
ghsa-coords
pkg:npm/passport-sharepoint
Range: < 0.4.0

Patches

Vulnerability mechanics

References

auth0.com/docs/security/bulletins/cve-2019-13483nvdVendor AdvisoryWEB
github.com/advisories/GHSA-45fh-g845-pj9wghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-13483ghsaADVISORY

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000