CVE-2019-13483

CVE-2019-13483 describes a critical authentication bypass vulnerability in Auth0 Passport-SharePoint versions prior to 0.4.0, where the software fails to validate JSON Web Token (JWT) signatures. This flaw allows unauthenticated attackers to forge access tokens, thereby bypassing authentication and authorization controls. With a CVSS score of 7.3 (HIGH), this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to unauthorized access to confidential data, modification of information, and denial of service. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.