Auth0 authentication bypass flaws put 2,000 enterprises at risks

Recently, Auth0 was discovered to have a serious authentication bypass vulnerability. This vulnerability (CVE-2018-6873) stems from Auth0’s Legacy Lock API which does not properly validate the parameters of the JSON Web Tokens (JWT) and can...