Angular Jwt

angular-jwt

Vendor: Auth0 • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2018-11537

1Auth0

1Angular Jwt

Nov 21, 2024

Jun 19, 2018

N/A· v4

6.5 MEDIUM· v3

4.3 MEDIUM· v2

Auth0 angular-jwt before 0.1.10 treats whiteListedDomains entries as regular expressions, which allows remote attackers with knowledge of the jwtInterceptorProvider.whiteListedDomains setting to bypass the domain whiteli...Show more