Threats Tagged 'ghsa-754j-98wh-57rf'
View all threats tagged with 'ghsa-754j-98wh-57rf'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-754j-98wh-57rf'
Click on any threat for detailed analysis and mitigation recommendations
0 Swoosh.Adapters.MsGraph constructs Microsoft Graph API request URLs by directly inserting the sender's email address into the URL path without encoding or validation. If the sender's address is derived from untrusted input, an attacker can inject URL-special characters to manipulate the request path and query string. This allows redirection of authenticated requests to other Graph endpoints within the token's scope, effectively enabling constrained server-side request forgery. Applications using fixed, trusted sender addresses are not affected. A patch is available to address this issue. Join the discussion | GCVE Database | 10/16/2026, 19:22:31 UTC Added: 10/16/2026, 23:10:39 UTC |
Showing 1 to 1 of 1 result