Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/10/16 7:22 p.m.•3 views

swoosh has email-derived URL path injection in Microsoft Graph endpoint

Summary Swoosh.Adapters.MsGraph builds its Microsoft Graph API request URL by interpolating the sender's email address directly into the URL path /users/from/sendMail without percent-encoding or validation. In applications that derive the from address from untrusted or user-influenced input a...

2.1CVSS5.8AI score0.00203EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder