Auth0 Account Link Extension
Approved changes feed: RSS · Atom
cpe:2.3:a:auth0-extensions:auth0-account-link-extension:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Auth0 Extensions (735f57b7-f6bb-5fb6-b980-f054018b1ea7) |
|---|---|
| Product | Auth0 Account Link Extension (68e48301-bf8c-5d2f-8c8b-55fcd3d16c1c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-46345 |
vulnerable | 2026-06-08 07:27:08.092697 |
Auth0 Account Link Extension JWT Invalid Signature Validation
Auth0 Account Link Extension is an extension aimed to help link accounts easily. Versions 2.3.4 to 2.6.6 do not verify the signature of the provided JWT. This allows the user the ability to supply a forged token and the potential to access user information without proper authorization. This issue has been patched in versions 2.6.7, 2.7.0, and 3.0.0. It is recommended to upgrade to version 3.0.0 or greater.
Published: 2025-05-01T17:20:24.010Z
Updated: 2025-05-02T17:39:32.800Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.