CVE-2018-11537 Auth0 angular-jwt misinterprets allowlist as regex
Attackers can bypass domain whitelist filters in the angular-jwt library by exploiting regex interpretation of whitelist entries.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2018-11537?
CVE-2018-11537 is a medium-severity vulnerability in n/a, published on 19 Jun 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Auth0 angular-jwt before 0.1.10 treats whiteListedDomains entries as regular expressions, which allows remote attackers with knowledge of the jwtInterceptorProvider.whiteListedDomains setting to bypass the domain whitelist filter via a crafted domain.
Weakness: CWE-20
Which versions are affected by CVE-2018-11537?
2 open source packages ship an affected version, including angular-jwt. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
angular-jwt npm | All versions | 0.1.10 |
angular-jwt npm | All versions | 0.1.10 |
Products include Auth0 Angular-Jwt.
How do I fix CVE-2018-11537?
Upgrade angular-jwt to 0.1.10 or later.
Is CVE-2018-11537 being exploited?
There is no known exploitation of CVE-2018-11537 in the wild and no public exploit code.
Sources
Also known as GHSA-vm2p-f5j4-mj6g.