CVE-2018-6873

CVE-2018-6873 is a critical privilege escalation vulnerability affecting the Auth0 authentication service, specifically Auth0.js, prior to October 15, 2017. The flaw stems from a lack of JWT audience validation, allowing an attacker to gain elevated privileges. With a CVSS score of 9.8 (CRITICAL), this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to full compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.