Assent
Monthly
Account impersonation in pow-auth Assent's Sign in with Apple strategy (versions 0.1.25 through 0.3.1) allows an unauthenticated remote attacker to override verified ID token claims with a client-controlled callback parameter. An attacker who completes a genuine Sign in with Apple login using their own Apple ID can edit the `user` form parameter so that `sub`, `email`, and other claims are replaced; applications that use those values for account lookup, linking, verification, or access control then act on the attacker's identity. No public exploit code was identified at time of analysis, and a vendor patch is available in version 0.3.2.
Account impersonation in pow-auth Assent's Sign in with Apple strategy (versions 0.1.25 through 0.3.1) allows an unauthenticated remote attacker to override verified ID token claims with a client-controlled callback parameter. An attacker who completes a genuine Sign in with Apple login using their own Apple ID can edit the `user` form parameter so that `sub`, `email`, and other claims are replaced; applications that use those values for account lookup, linking, verification, or access control then act on the attacker's identity. No public exploit code was identified at time of analysis, and a vendor patch is available in version 0.3.2.