CVE-2026-83711 Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability

...

CVE-2026-83711: Authorization Bypass Through User-Controlled Key

Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-33843: Authentication Bypass Using an Alternate Path or Channel

Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network...

CVE-2024-21381

Microsoft Azure Active Directory B2C Spoofing Vulnerability...

CVE-2024-21381: Cross-Site Request Forgery (CSRF)

Microsoft Azure Active Directory B2C Spoofing Vulnerability...

cn.itlym:shoulder-starter-auth-server (0.6), cn.itlym:shoulder-starter-auth-token (0.6) +22 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (8.21)

com.nimbusds:nimbus-jose-jwt MAVEN version 8.21 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - cn.itlym:shoulder-starter-auth-server 0.6 - cn.itlym:shoulder-starter-auth-token 0.6 -...

com.microsoft.azure:azure-active-directory-b2c-spring-boot-starter (>=2.1.4.m1, <=2.1.6.m2), com.sap.cloud.security.xsuaa:spring-xsuaa (>=1.1.0.rc1, <=2.1.0) +4 more potentially affected by CVE-2018-15801 via org.springframework.security:spring-security-oauth2-jose (5.1.1.release)

org.springframework.security:spring-security-oauth2-jose MAVEN version 5.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-oauth2-jose and may be impacted: -...