CVE-2019-13483: AUTH0 Passport-SharePoint

High severity, CVSS 7.3. EPSS: 0.6% chance of exploitation in the next 30 days.

Auth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before processing. This allows attackers to forge tokens and bypass authentication and authorization mechanisms.

Affected products

• AUTH0 Passport-SharePoint: before 0.4.0 (fixed in 0.4.0)

Published 2019-07-25. Last modified 2026-06-17.