Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability - @azure/identity

Description

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability.

Recommendation

Update the @azure/identity package to the latest compatible version. Followings are version details:

• Affected version(s): < 4.2.1
• Patched version(s): 4.2.1

References

• GHSA-m5vv-6r4h-3vj9
• msrc.microsoft.com
• CVE-2024-35255
• CWE-362
• CAPEC-310
• OWASP 2021-A6

Related Issues

• Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability - CVE-2024-35255
• @cyclonedx/cyclonedx-library Improper Restriction of XML External Entity Reference vulnerability - CVE-2024-34345
• ZDI-CAN-23894: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability - CVE-2024-39309
• Stimulsoft Dashboard.JS directory traversal vulnerability - CVE-2024-24398

You might also like:

How do hackers hack websites?

CSRF, XXE, and 12 Other Security Acronyms Explained

Exploiting Server Version Disclosure

Tags:

npm

@azure/identity