Skip to content
OpenAdvisories

Product · Discourse

discourse-microsoft-auth

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2023-46241

    Potential account take over due to unverified emails from Microsoft Identity Platform

    `discourse-microsoft-auth` is a plugin that enables authentication via Microsoft. On sites with the `discourse-microsoft-auth` plugin enabled, an attack can potentially take control of a victim's Discourse account. Sites that have configured their application…

    Discourse discourse-microsoft-auth