508 matches found
swoosh has email-derived URL path injection in Microsoft Graph endpoint
Summary Swoosh.Adapters.MsGraph builds its Microsoft Graph API request URL by interpolating the sender's email address directly into the URL path /users/from/sendMail without percent-encoding or validation. In applications that derive the from address from untrusted or user-influenced input a...
2.1CVSS5.8AI score0.00203EPSS
SaveExploits0References7Affected Software1
20