CVE-2024-27086
1 advisory.
NuGet/Microsoft.Identity.Client CVE-2024-27086: low 3.9
MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service
Action: Upgrade Microsoft.Identity.Client to 4.59.1 (4.59.x) or 4.60.3 (4.60.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.48.0 | 4.59.1 | - |
| 4.60.0 | 4.60.3 | - |
Fixed versions
| 4.59.1 | 4.60.3 |
Sources
- osv: GHSA-x674-v45j-fwxw
- https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/security/advisories/GHSA-x674-v45j-fwxw
- https://nvd.nist.gov/vuln/detail/CVE-2024-27086
- https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/commit/413e319472ccf48c86647f19fa2aa49ff6038488
- https://github.com/AzureAD/microsoft-authentication-library-for-dotnet
- https://learn.microsoft.com/en-us/entra/msal/dotnet
- https://www.nuget.org/packages/Microsoft.Identity.Client
CVE-2024-27086 · published · modified · JSON