CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-68129

Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. In applications built with the Auth0-PHP SDK, the audience validation in access tokens is performed improperly. Without proper validation, affected applications may accept ID tokens as Access tokens. Projects are affected if they use Auth0-PHP SDK versions between v8.0.0 and v8.17.0, or applications using the following SDKs that rely on the Auth0-PHP SDK versions between v8.0.0 and v8.17.0: Auth0/symfony versions between 5.0.0 and 5.5.0, Auth0/laravel-auth0 versions between 7.0.0 and 7.19.0, and/or Auth0/wordpress plugin versions between 5.0.0-BETA0 and 5.4.0. Auth0/Auth0-PHP version 8.18.0 contains a patch for the issue.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 28.7%

CVSS Severity

CVSS v3 Score 6.8

References

Products affected by CVE-2025-68129

Auth0 » Auth0-Php » Version: 8.0.0

cpe:2.3:a:auth0:auth0-php:8.0.0
Auth0 » Auth0-Php » Version: 8.0.1

cpe:2.3:a:auth0:auth0-php:8.0.1
Auth0 » Auth0-Php » Version: 8.0.2

cpe:2.3:a:auth0:auth0-php:8.0.2
Auth0 » Auth0-Php » Version: 8.0.3

cpe:2.3:a:auth0:auth0-php:8.0.3
Auth0 » Auth0-Php » Version: 8.0.4

cpe:2.3:a:auth0:auth0-php:8.0.4
Auth0 » Auth0-Php » Version: 8.0.5

cpe:2.3:a:auth0:auth0-php:8.0.5
Auth0 » Auth0-Php » Version: 8.0.6

cpe:2.3:a:auth0:auth0-php:8.0.6
Auth0 » Auth0-Php » Version: 8.1.0

cpe:2.3:a:auth0:auth0-php:8.1.0
Auth0 » Auth0-Php » Version: 8.10.0

cpe:2.3:a:auth0:auth0-php:8.10.0
Auth0 » Auth0-Php » Version: 8.11.0

cpe:2.3:a:auth0:auth0-php:8.11.0
Auth0 » Auth0-Php » Version: 8.11.1

cpe:2.3:a:auth0:auth0-php:8.11.1
Auth0 » Auth0-Php » Version: 8.12.0

cpe:2.3:a:auth0:auth0-php:8.12.0
Auth0 » Auth0-Php » Version: 8.13.0

cpe:2.3:a:auth0:auth0-php:8.13.0
Auth0 » Auth0-Php » Version: 8.14.0

cpe:2.3:a:auth0:auth0-php:8.14.0
Auth0 » Auth0-Php » Version: 8.15.0

cpe:2.3:a:auth0:auth0-php:8.15.0
Auth0 » Auth0-Php » Version: 8.16.0

cpe:2.3:a:auth0:auth0-php:8.16.0
Auth0 » Auth0-Php » Version: 8.17.0

cpe:2.3:a:auth0:auth0-php:8.17.0
Auth0 » Auth0-Php » Version: 8.2.0

cpe:2.3:a:auth0:auth0-php:8.2.0
Auth0 » Auth0-Php » Version: 8.2.1

cpe:2.3:a:auth0:auth0-php:8.2.1
Auth0 » Auth0-Php » Version: 8.3.0

cpe:2.3:a:auth0:auth0-php:8.3.0
Auth0 » Auth0-Php » Version: 8.3.1

cpe:2.3:a:auth0:auth0-php:8.3.1
Auth0 » Auth0-Php » Version: 8.3.2

cpe:2.3:a:auth0:auth0-php:8.3.2
Auth0 » Auth0-Php » Version: 8.3.3

cpe:2.3:a:auth0:auth0-php:8.3.3
Auth0 » Auth0-Php » Version: 8.3.4

cpe:2.3:a:auth0:auth0-php:8.3.4
Auth0 » Auth0-Php » Version: 8.3.5

cpe:2.3:a:auth0:auth0-php:8.3.5
Auth0 » Auth0-Php » Version: 8.3.6

cpe:2.3:a:auth0:auth0-php:8.3.6
Auth0 » Auth0-Php » Version: 8.3.7

cpe:2.3:a:auth0:auth0-php:8.3.7
Auth0 » Auth0-Php » Version: 8.3.8

cpe:2.3:a:auth0:auth0-php:8.3.8
Auth0 » Auth0-Php » Version: 8.4.0

cpe:2.3:a:auth0:auth0-php:8.4.0
Auth0 » Auth0-Php » Version: 8.5.0

cpe:2.3:a:auth0:auth0-php:8.5.0
Auth0 » Auth0-Php » Version: 8.6.0

cpe:2.3:a:auth0:auth0-php:8.6.0
Auth0 » Auth0-Php » Version: 8.7.0

cpe:2.3:a:auth0:auth0-php:8.7.0
Auth0 » Auth0-Php » Version: 8.7.1

cpe:2.3:a:auth0:auth0-php:8.7.1
Auth0 » Auth0-Php » Version: 8.8.0

cpe:2.3:a:auth0:auth0-php:8.8.0
Auth0 » Auth0-Php » Version: 8.9.0

cpe:2.3:a:auth0:auth0-php:8.9.0
Auth0 » Auth0-Php » Version: 8.9.1

cpe:2.3:a:auth0:auth0-php:8.9.1
Auth0 » Auth0-Php » Version: 8.9.3

cpe:2.3:a:auth0:auth0-php:8.9.3
Auth0 » Laravel-Auth0 » Version: 7.0.0

cpe:2.3:a:auth0:laravel-auth0:7.0.0
Auth0 » Laravel-Auth0 » Version: 7.0.1

cpe:2.3:a:auth0:laravel-auth0:7.0.1
Auth0 » Laravel-Auth0 » Version: 7.1.0

cpe:2.3:a:auth0:laravel-auth0:7.1.0
Auth0 » Laravel-Auth0 » Version: 7.10.0

cpe:2.3:a:auth0:laravel-auth0:7.10.0
Auth0 » Laravel-Auth0 » Version: 7.10.1

cpe:2.3:a:auth0:laravel-auth0:7.10.1
Auth0 » Laravel-Auth0 » Version: 7.11.0

cpe:2.3:a:auth0:laravel-auth0:7.11.0
Auth0 » Laravel-Auth0 » Version: 7.12.0

cpe:2.3:a:auth0:laravel-auth0:7.12.0
Auth0 » Laravel-Auth0 » Version: 7.13.0

cpe:2.3:a:auth0:laravel-auth0:7.13.0
Auth0 » Laravel-Auth0 » Version: 7.14.0

cpe:2.3:a:auth0:laravel-auth0:7.14.0
Auth0 » Laravel-Auth0 » Version: 7.15.0

cpe:2.3:a:auth0:laravel-auth0:7.15.0
Auth0 » Laravel-Auth0 » Version: 7.16.0

cpe:2.3:a:auth0:laravel-auth0:7.16.0
Auth0 » Laravel-Auth0 » Version: 7.17.0

cpe:2.3:a:auth0:laravel-auth0:7.17.0
Auth0 » Laravel-Auth0 » Version: 7.18.0

cpe:2.3:a:auth0:laravel-auth0:7.18.0
Auth0 » Laravel-Auth0 » Version: 7.19.0

cpe:2.3:a:auth0:laravel-auth0:7.19.0
Auth0 » Laravel-Auth0 » Version: 7.2.0

cpe:2.3:a:auth0:laravel-auth0:7.2.0
Auth0 » Laravel-Auth0 » Version: 7.2.1

cpe:2.3:a:auth0:laravel-auth0:7.2.1
Auth0 » Laravel-Auth0 » Version: 7.2.2

cpe:2.3:a:auth0:laravel-auth0:7.2.2
Auth0 » Laravel-Auth0 » Version: 7.3.0

cpe:2.3:a:auth0:laravel-auth0:7.3.0
Auth0 » Laravel-Auth0 » Version: 7.4.0

cpe:2.3:a:auth0:laravel-auth0:7.4.0
Auth0 » Laravel-Auth0 » Version: 7.5.0

cpe:2.3:a:auth0:laravel-auth0:7.5.0
Auth0 » Laravel-Auth0 » Version: 7.5.1

cpe:2.3:a:auth0:laravel-auth0:7.5.1
Auth0 » Laravel-Auth0 » Version: 7.5.2

cpe:2.3:a:auth0:laravel-auth0:7.5.2
Auth0 » Laravel-Auth0 » Version: 7.6.0

cpe:2.3:a:auth0:laravel-auth0:7.6.0
Auth0 » Laravel-Auth0 » Version: 7.7.0

cpe:2.3:a:auth0:laravel-auth0:7.7.0
Auth0 » Laravel-Auth0 » Version: 7.8.0

cpe:2.3:a:auth0:laravel-auth0:7.8.0
Auth0 » Laravel-Auth0 » Version: 7.8.1

cpe:2.3:a:auth0:laravel-auth0:7.8.1
Auth0 » Laravel-Auth0 » Version: 7.9.0

cpe:2.3:a:auth0:laravel-auth0:7.9.0
Auth0 » Laravel-Auth0 » Version: 7.9.1

cpe:2.3:a:auth0:laravel-auth0:7.9.1
Auth0 » Symfony » Version: 5.0.0

cpe:2.3:a:auth0:symfony:5.0.0
Auth0 » Symfony » Version: 5.1.0

cpe:2.3:a:auth0:symfony:5.1.0
Auth0 » Symfony » Version: 5.2.0

cpe:2.3:a:auth0:symfony:5.2.0
Auth0 » Symfony » Version: 5.2.1

cpe:2.3:a:auth0:symfony:5.2.1
Auth0 » Symfony » Version: 5.2.2

cpe:2.3:a:auth0:symfony:5.2.2
Auth0 » Symfony » Version: 5.2.3

cpe:2.3:a:auth0:symfony:5.2.3
Auth0 » Symfony » Version: 5.3.0

cpe:2.3:a:auth0:symfony:5.3.0
Auth0 » Symfony » Version: 5.3.1

cpe:2.3:a:auth0:symfony:5.3.1
Auth0 » Symfony » Version: 5.4.0

cpe:2.3:a:auth0:symfony:5.4.0
Auth0 » Symfony » Version: 5.4.1

cpe:2.3:a:auth0:symfony:5.4.1
Auth0 » Symfony » Version: 5.5.0

cpe:2.3:a:auth0:symfony:5.5.0
Auth0 » Wp-Auth0 » Version: Any

cpe:2.3:a:auth0:wp-auth0:*

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-68129

Products

Pricing

Contact Us