CVE-2018-11537 | BDVDB-2026-102783 Detail

Description#

Auth0 angular-jwt before 0.1.10 treats whiteListedDomains entries as regular expressions, which allows remote attackers with knowledge of the jwtInterceptorProvider.whiteListedDomains setting to bypass the domain whitelist filter via a crafted domain.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://auth0.com/docs/security/bulletins/cve-2018-11537

Exploit#

No public exploit known

History#

Version 12018-06-19Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.