What’s Vulnerable › Vulnerabilities

CVE-2019-16929

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-10-08 · updated 2026-06-17
• Weakness: CWE-287

Description

Auth0 auth0.net before 6.5.4 has Incorrect Access Control because IdentityTokenValidator can be accidentally used to validate untrusted ID tokens.

Affected products

• Auth0.Net: from 5.8.0 through 6.5.3

References

• https://auth0.com/docs/security/bulletins/cve-2019-16929
• https://auth0.com/docs/security/bulletins/cve-2019-16929

Get alerted when CVE-2019-16929 or the next vulnerability affects your stack