| Package | Affected versions | Patched versions |
|---|---|---|
| microsoft.identitymodel.clients.activedirectory | ≥ 5.0.0, < 5.2.0 | 5.2.0 |
| active directory authentication library | = 5.0.0= 5.0.1= 5.0.2= 5.0.3≥ 5.0.5, < 5.2.0 | 5.2.0 |
| nuget | = 5.2.0 |
An elevation of privilege vulnerability exists in Azure Active Directory Authentication Library On-Behalf-Of flow, in the way the library caches tokens, aka 'Azure Active Directory Authentication Library Elevation of Privilege Vulnerability'.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free